Computer firewall device based on cloud database and using method

Abstract

The invention discloses a computer firewall device based on a cloud database and a use method, and the method comprises the following steps: S1, application protocol intelligent recognition control: automatically recognizing a DBA protocol, an operation and maintenance protocol, hacker access and application software, carrying out the comprehensive monitoring of all interface access of the database, and achieving the effective access control; S2, precise interception: performing blocking based on various conditions such as IP addresses, time, operations, keywords, database accounts, statementlengths, column names, table names, line numbers and injection feature libraries, and precise access control is realized; S3, APT attack prevention: according to the combination of access behaviors, the statistical model quickly verifies and blocks complex and continuous violation operation and malicious attack behaviors; S4, built-in AI: a built-in intelligent learning module, machine intelligentlearning, automatic modeling and automatic generation of a blocking rule base for actively defending unknown security threats; S5, bypass blocking.

Description

technical field [0001] The present invention relates to the deployment of computer firewalls, and more specifically, to a computer firewall device and usage method based on a cloud database. Background technique [0002] A database firewall is a security device or product that resists and eliminates database security issues caused by application business logic loopholes or defects. The database firewall is generally deployed between the application server and the database server, and is completed by means of database protocol analysis. But this is not the only way to achieve it, you can deploy it outside the database without using protocol analysis. From this definition, it can be seen that the essential goal of the database firewall is to patch business applications to avoid affecting database security due to application business logic loopholes or defects [0003] The database does not handle the reset signal very well, and needs to rely on the dead process detection pro...

AI Technical Summary

Problems solved by technology

Since the processing cannot be guaranteed to be effective, that is to say, in quite a few scenarios, there may be a large number of dead processes, consuming a large amount of database session resources, and even some shared resources are not released, resulting in the suspension of the database. The existing database firewalls are silent Type of protection measures, does not have active protection function, and cannot independently improve the protection performance