Backdoor safety protection device and method applied to global wide area network

Abstract

The invention provides a backdoor safety protection device and method applied to a global wide area network. The backdoor safety protection device is integrated into application safety protection equipment of the global wide area network. The application security protection equipment specifically comprises: an acquisition module, which is used for acquiring feature code keywords of a script backdoor program of a request website; a calling interface module, which is connected with the acquisition module and is used for calling the feature code keywords acquired by the acquisition module; a predefined rule base, which is used for storing a preset keyword combination set in advance; a rule detection module, which is connected with the predefined rule base and the calling interface module andused for detecting whether at least one keyword group formed by keywords is matched with a certain keyword group in the preset keyword combination set or not, and if matching succeeds, generating a disconnection source request connection command; and an action module, which is connected with the rule detection module and is used for executing the disconnection source request connection command soas to refuse the access request between the request websites. According to the method, dynamic access control can be carried out on the malicious script backdoor program implanted into the website, hacker behaviors are found, connection is disconnected in time, the server with the Trojan horse is protected, deeper defense is achieved, and attackers are prevented from further invading.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a backdoor security protection device and method applied to a global wide area network. Background technique [0002] The use of the Internet is increasingly widespread, and programs based on the web application layer (global wide area network application layer) are widely popularized. In the prior art, various protection technologies are adopted for web application security issues, such as figure 1 , the database server (14) and the Web server (13) are used as background servers, and security protection devices such as a firewall (10), an IDS / IPS (11), and an application firewall (12) are arranged between the client (9) requesting access . [0003] Firewall (10) is a kind of equipment that helps computer network build a relatively isolated protective barrier between its internal and external networks to protect user data and information security; IDS (intrusion detecti...

AI Technical Summary

Problems solved by technology

[0006] The present invention provides a backdoor safety protection device and method applied to the global wide area network, aiming to solve the technical problem in the prior art that the malicious script backdoor program itself that has been implanted in the website cannot be protected

Images