Safety protection method and device and storage medium

Abstract

The embodiment of the invention provides a safety protection method and device and a storage medium. The method comprises the steps that if a first connection request initiated to a target server sideis monitored, the first connection request is released, and the first connection request is from a target request side; determining whether the target request end performs login authentication with the target server end or not in the first connection process; and if the target request end does not perform login authentication with the target server end, intercepting a subsequent connection request initiated by the target request end to the target server end. Therefore, the first connection request initiated to the target server is regarded as the suspicious traffic, the first release strategyis adopted for the suspicious traffic, and whether the suspicious traffic can be trusted is judged based on whether the suspicious traffic and the target server are subjected to login authenticationor not, so that subsequent access control can be performed on the suspicious traffic according to the judgment result; therefore, the missed blocking rate and the wrong blocking rate are reduced, theattack surface is reduced, and the security of the communication process is improved.

Description

technical field [0001] The present application relates to the field of security technologies, in particular to a security protection method, device and storage medium. Background technique [0002] With the continuous development of cloud computing technology, more and more enterprise users or individual users choose cloud computing resources to reduce service costs, which can also effectively improve service quality. [0003] Users can realize various services based on cloud computing resources. At present, in order to ensure the security of these services, a whitelist or blacklist is usually used to intercept dangerous traffic directed at these services. For example, the traffic in the whitelist is allowed, while the traffic not in the whitelist is blocked; or, the traffic in the blacklist is blocked, and the traffic not in the blacklist is allowed. [0004] However, this method is not ideal for intercepting dangerous traffic, and problems such as missing or wrong blocki...

AI Technical Summary

Problems solved by technology

[0004] However, this method is not ideal for intercepting dangerous traffic, and problems such as missing or wrong blocking often occur

Images