Network traffic safety monitoring method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention discloses a network traffic security monitoring method and device, electronic equipment and a storage medium, relates to the technical field of computer information security, and is used for realizing bypass security monitoring by using a WAF (Wireless Application Function) in a reverse proxy mode under the condition of not changing the existing network topology structure of a user. The network flow safety monitoring method is used in a network in which a client is connected with a to-be-protected first server. The network comprises a WAF in a reverse proxy mode. The output end of the WAF is connected with an http server which returns fixed content to any request, the WAF is set to protect the http server, and the method comprises the following steps: acquiring an http request in the traffic of accessing the first server by the client; sending the http request to the WAF; and detecting whether the WAF gives an alarm to the http request or not so as to realize network flow security monitoring.

Description

technical field [0001] The invention relates to the technical field of computer information security, in particular to a network traffic security monitoring method, device, electronic equipment and storage medium. Background technique [0002] WAF (Web Application Firewall, Web Application Protection System) is a product that provides protection for Web (network) applications by implementing a series of security policies for HTTP / HTTPS (Hypertext Transfer Protocol). As the content and applications of the Web become more and more abundant, and the amount of information and value increases, the incidents and frequency of Web intrusion and tampering are gradually increasing. This requires a dedicated web firewall or protection system to maintain the security of the website. [0003] According to the different working methods and principles of WAF, its working modes usually include transparent proxy mode, reverse proxy mode and routing proxy mode. Compared with the other two mo...

AI Technical Summary

Problems solved by technology

[0005] During the research, the inventor found that because the WAF in the reverse proxy mode can achieve load balancing, some WAF manufacturers produce this type of WAF. When this type of WAF is sold to users, due to various reasons, the user's current or For a period of time, I do not want to change its existing network topology and want to realize the security protection function of WAF. Therefore, a bypass solution is required. However, WAF in reverse proxy mode is added on the reverse proxy server. Installing rules and execution modules, combined with the above working principles, it can be seen that WAF in reverse proxy mode cannot achieve bypassing, so it cannot meet the needs of users

Images