Access request capturing method, device, computer equipment and storage medium

Abstract

The present application relates to an access request capturing method, device, computer equipment and storage medium. The aforementioned method includes: when receiving the first access request of the current user, returning session response information, the session response information includes session control identifiers and auxiliary authentication data stored in different locations; receiving the current non-first access request of the current user; When the non-first access request carries a session control identifier and does not carry auxiliary authentication data, capture the current non-first access request. In the aforementioned method, when receiving the first access request, a session control identifier and auxiliary authentication data corresponding to the current user are created, and the session control identifier and auxiliary authentication data are set in different positions in the session response message. When the first access request is made, combined with the session control identifier and auxiliary authentication data, the content of the current non-first access request is comprehensively authenticated, which improves the security of network communication.

Description

technical field [0001] The present application relates to the technical field of computer information security, in particular to an access request capturing method, device, computer equipment and storage medium. Background technique [0002] After the web (Global Wide Area Network) became the mainstream network and application technology, the security of the web server has always been the focus of the industry. Cyber ​​attacks such as tampering with webpages and spreading viruses have occurred in various places, causing heavy losses to users and Internet companies. [0003] At present, web protection software is mostly a combination of data security software and firewall products, and it is difficult to accurately identify whether a certain access behavior is a normal access by a real user. This type of software usually judges access behavior based on the process and service level, and its detection time is late, which cannot effectively prevent virus programs from invading...

AI Technical Summary

Problems solved by technology

Cyber ​​attacks such as tampering with webpages and spreading viruses have occurred in various places, causing heavy losses to users and Internet companies

[0003] At present, web protection software is mostly a combination of data security software and firewall products, and it is difficult to accurately identify whether a certain access behavior is a normal access by a real user

This type of software usually judges access behavior based on the process and service level. Its detection time is late and cannot effectively prevent virus programs from invading the host, leaving a window period for other malicious operations to exploit.

Images