Zero rule attack detection method and device based on semantic context

Abstract

The invention provides a zero rule attack detection method based on semantic context. The method comprises the following steps: receiving a service query request input by a user; analyzing the content of the query request, and calling a content query condition and a constraint condition; when the query condition is met, allowing to enter a content acquisition channel; otherwise, setting a constraint condition in the content so as to enter a content acquisition channel, wherein the query condition is a preset rule of a semantic context, and the constraint condition is a zero rule vulnerability detection rule. According to the zero rule attack detection method based on the semantic context, the content acquisition is safer and the content acquisition efficiency is higher through a detection mode set by multiple conditions at the server side. In addition, the invention also discloses a zero rule attack detection device based on the semantic context.

Description

technical field [0001] The invention belongs to the technical field of information security detection, and in particular relates to a semantic context-based zero-rule attack detection method and device. Background technique [0002] With the continuous development of network technology, it has become very common for users to log in to service devices through the interface to obtain corresponding content. However, the development of network technology also affects network security. When users obtain content through the interface, on the one hand, the input content There is no problem in itself, but it may be hijacked by attackers to obtain content and attack service equipment. On the other hand, illegal users directly conduct network attacks, which poses a security threat to content servers. Therefore, how to use user behavior track information To identify the legitimacy of the acquired content, and to find out whether there is a security threat in the server in time after ac...

AI Technical Summary

Problems solved by technology

[0002] With the continuous development of network technology, it has become very common for users to log in to service devices through the interface to obtain corresponding content. However, the development of network technology also affects network security. When users obtain content through the interface, on the one hand, the input content There is no problem in itself, but it may be hijacked by attackers to obtain content and attack service equipment. On the other hand, illegal users directly conduct network attacks, which poses a security threat to content servers. Therefore, how to use user behavior track information To identify the legitimacy of the content it acquires, and after acquisition, it can also find out whether there is a security threat in the server in time, which becomes a technical problem to be solved by the present invention

Images