Attack defense method and attack defense equipment

Abstract

The invention discloses an attack defense method and attack defense equipment, which are applied to an attack defense system. The attack defense system comprises scheduling equipment and at least oneprotection equipment, the protection equipment provides a plurality of protection IP addresses, and the terminal equipment accesses the website server through the protection IP addresses. And the scheduling equipment receives a protection address obtaining request from the first terminal equipment, obtains a corresponding first protection address sequence according to the identifier of the first terminal equipment, obtains a first unused protection IP address from the first protection address sequence, and returns the obtained protection IP address to the first terminal equipment. The scheduling equipment acquires the attacked protection IP addresses, and judges whether the protection IP addresses used in the first protection address sequence are attacked in sequence or not; and if the first terminal equipment is attacked, the scheduling equipment obtains an identifier of the first terminal equipment corresponding to the first protection address sequence, and determes the first terminal equipment as an attack source.

Description

technical field [0001] The present application relates to the field of computer and communication technologies, and in particular to an attack defense method and an attack defense device. Background technique [0002] Denial of service (DoS) attack is a means of network attack. The purpose of denial of service attack is to exhaust the network resources or system resources of the target computer, temporarily interrupt or stop the service provided by the target computer, and cause normal users to be unable to Access the target computer. When an attacker (also known as a hacker) uses two or more controlled computers on the network as the attack initiator to launch a DoS attack on the target computer, this attack method is called a distributed denial-of-service attack (distributed denial-of-service attack). -service attack, DDoS). [0003] In recent years, an attack called challenge collapsar (CC) has emerged. A CC attack is essentially a DDoS attack, and its characteristic i...

AI Technical Summary

Problems solved by technology

However, this method obviously cannot meet the needs of some websites whose services mainly rely on user interaction, such as shopping websites or game websites.

Images