WEB dynamic adaptive defense system and defense method based on false response

Abstract

The invention provides a WEB dynamic adaptive defense system and defense method based on false response. Based on the concept of moving target defense, a plurality of false WEB servers capable of being dynamically transformed is constructed around a protected WEB server, false sensitive data, false applications, false vulnerabilities and the like are constructed on the false WEB servers, and cheating hackers attack the false WEB servers. When a known attack or a suspicious behavior is identified, the known attack or the suspicious behavior is introduced into the false WEB server, and an attacker enters the false environment and then executes a subsequent attack action in the false environment until the attack is finished, so that multiple attempt attacks of the attacker are effectively defended, and meanwhile, the method has a relatively good defending capability on an unknown WEB attack. Besides, by continuously observing attack behaviors in a false environment, WEB attack features can be automatically extracted, attack detection rules are dynamically and adaptively adjusted, and the dynamic adaptive capacity of a defense system is improved.

Description

technical field [0001] The invention relates to the field of network security, in particular to a WEB dynamic self-adaptive defense system and a defense method based on a false response. Background technique [0002] With the rapid development of network technology, the Internet has become an indispensable part of human production and life, and the wave of informatization affects every corner of modern civilized society. According to a statistical report released by the China Internet Network Information Center, as of June 30, 2018, the number of Internet users in my country reached 802 million, with a penetration rate of 57.7%; the number of mobile Internet users reached 788 million, and the number of online payment users in my country reached 569 million. Among many network services, World Wide Web (Web or WWW for short) has become the most widely used network service. The resources and information provided on the WEB have a profound impact on human production and life. H...

AI Technical Summary

Problems solved by technology

Once some serious vulnerabilities are discovered by attackers, they may be exploited to access or destroy WEB servers without authorization

Images