Call control method, device, device and storage medium for remote procedure call

Abstract

Embodiments of the present application disclose a method, apparatus, device, and storage medium for invocation management and control of remote procedure calls. The relevant embodiments can be applied to various scenarios such as cloud security, and are used to maintain secure invocation of remote procedure calls. The method of the embodiment of the present application includes: performing security detection on the remote procedure call component through a filtering module, and when detecting that the remote procedure call component receives an information call request, collecting the call information corresponding to the remote procedure call component, and according to the transmission in the call information The protocol determines the communication address of the remote client corresponding to the information invocation request. If the communication address of the remote client is the non-local address of the client, the invocation information is determined as the abnormal invocation information. If the service interface in the abnormal invocation information and in the service interface method If any item belongs to a sensitive service interface or sensitive service interface method in the service blacklist, the information call request is determined as a dangerous call request, and the dangerous call request is intercepted.

Description

technical field [0001] The embodiments of the present application relate to the technical field of cloud security management, and in particular, to a method, apparatus, device, and storage medium for invocation management and control of remote procedure calls. Background technique [0002] With the continuous development of information technology, the attack technology used for spreading and using malicious programs is also constantly being upgraded. By using Remote Procedure Call (RPC), the existing RPC components in the service system can be released for malicious behavior, so that malicious behaviors can be released. Programs can steal personal information, or malicious programs can delete anti-virus applications by deleting the service, resulting in the disclosure of personal privacy information of the objects using the service system, which can lead to the collapse of the service system, resulting in property losses of the objects using the service system. Happening. ...

AI Technical Summary

Problems solved by technology

[0004] However, this remote procedure call interception method uses preset call information fields to configure filtering rules, which is difficult to fully cover all call information, and it is easy to miss or lack key call information, and it is easy to generate false positives in the process of judging hit rules or inaccurate judgments, leading to inaccurate judgments of malicious programs, resulting in a decrease in the interception accuracy

Images