JAVA WEB dynamic configuration security defense method

Abstract

The invention discloses a JAVA WEB dynamic configuration security defense method, which comprises the following steps of: A, setting a'security configuration rule ', and performing timing synchronous configuration modification; b, acquiring a'request data object 'according to a protocol request sent by a client; c, matching and replacing the'request data object 'and the'security rule template', and generating a'desensitized request data object '; d, triggering a security event response chain; and E, transmitting the'securely desensitized request data object 'to a JAVA WEB application, and performing information security desensitization on the attack request of the request parameters with XSS and SQL injection by setting a message interception rule and a data replacement rule, thereby preventing the attack from occurring. When a new HTTP security attack vulnerability occurs, only the security rule template needs to be created or modified, and the application server can automatically and synchronously configure and modify, so that security protection is realized.

Description

technical field [0001] The invention relates to the field of JAVA WEB application technology, in particular to a JAVA WEB dynamic configuration security defense method. Background technique [0002] Security defense system, for the purpose of maintaining social public security, is a system composed of security protection technology and other related products, or a system composed of these systems as subsystems or integrated. [0003] The configuration-based dynamic security defense system is designed to help us intercept and process more efficiently. It usually does not only intercept one filtering rule, but supports multiple filtering rules and has flexible functions. [0004] As the Internet is more and more widely used in various fields, various network attacks are also constantly changing. For various enterprises and institutions, once they are attacked by the network, it will cause relatively large economic losses. Network attacks are mainly due to weak security defen...

AI Technical Summary

Problems solved by technology

However, the current common solution is to implement security protection through patching. This solution requires restarting the service, takes a long time to solve, and easily affects existing functions.

Images