Security defense method and device

Abstract

The embodiment of the invention discloses a security defense method and device. The method comprises the following steps: distributing a web service request to a plurality of software executors, wherein the plurality of software executors are obtained by compiling the same software in different compiling modes, analyzing the response information to determine whether abnormal response information is contained or not, and offline the software executor corresponding to the abnormal response information under the condition that the abnormal response information is contained. Therefore, the functions of the software executors obtained through different compiling modes are the same, but structures are different, in this way, attacks on a certain software execution body are greatly reduced; the risk that other execution bodies of the software or execution bodies of other versions of the software are attacked is avoided, and the risk that the software is attacked is greatly reduced by selecting the abnormal response information even if the software execution body which is possibly attacked is discovered and the software execution body is offline in time.

Description

technical field [0001] The invention relates to the field of the Internet, in particular to a security defense method and device. Background technique [0002] Accessing websites through browsers has become the main way for PC and mobile users to obtain information and services. The web service system involves user access to login passwords, access to search records and other user sensitive information and data. With huge potential benefits, attacks against web services emerge in endlessly. [0003] Among them, the attack on the memory error of the service system is a kind of attack on the web service. This attack method is to use the security loopholes of the software to construct malicious input, resulting in unexpected errors when the software processes the data stream. [0004] At present, due to the limited diversity of software and the hereditary code between multiple versions of the same software, once an attacker finds a vulnerability, he will spread the vulnerabili...

AI Technical Summary

Problems solved by technology

[0003] Among them, the attack on the memory error of the service system is a kind of attack on the web service. The attack method is to use the security loopholes of the software to construct malicious input, resulting in unexpected errors when the software processes the data stream.

[0004] At present, due to the limited diversity of software and the hereditary code between multiple versions of the same software, once an attacker finds a vulnerability, he will spread the vulnerability to different versions of the same type of software, which affects the security of access. There is a great security risk

Images