Malicious network CC attack prevention method and device

Abstract

The invention discloses a malicious network CC attack prevention method and device. The method comprises the following steps: A) monitoring and analyzing an NGINX log file in past set time by using ashell command; B) checking whether the access frequency of a certain IP to an address of a certain interface exceeds a threshold value or not in the NGINX log file in the past set time by using a textprocessing and arrangement command, and if so, executing the step D); otherwise, executing the step C); C) not realizing access limit, returning to the step B); D) writing an inbound rule into the firewall by using the shell command, and performing DROP operation on the inbound data packet of the specified IP; E) waiting for a set time, and returning to the step A. The method can solve the problem that a traditional firewall is difficult to resist CC attacks, can also avoid the tedious operation of manually and repeatedly adding rules, can transparently present a working principle of a completely self-compiled script, can also be customized at will according to needs, and does not need to buy commercial protection services at a high price at the same time.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method and device for preventing malicious network CC attacks. Background technique [0002] CC attack is to use different IPs to frequently initiate requests to the API interface through one or more request addresses, and realize the camouflage of DDos by sending a large number of legitimate requests to achieve the purpose of paralyzing the back-end server. Because it is characterized by access through a large number of different IPs, it is difficult for traditional system firewalls to resist such attacks. It is necessary to purchase commercial protection services at a high price to resist such CC attacks, and the cost is relatively high. Contents of the invention [0003] The technical problem to be solved by the present invention is that, aiming at the above-mentioned defects of the prior art, it provides a short board that can solve the shortcomings of traditional firewal...

AI Technical Summary

Problems solved by technology

Because it is characterized by access through a large number of different IPs, it is difficult for traditional system firewalls to resist such attacks.

It is necessary to purchase commercial protection services at a high price to resist this kind of CC attack, and the cost is relatively high

Images