Method, device and system for preventing replay attack

Abstract

The invention provides a method, device and system for preventing a replay attack, and the method comprises the steps: intercepting a request when the request sent by a browser to an application server is monitored; obtaining a timestamp matched with the request and determining to-be-encrypted data; determining an encrypted character string according to the to-be-encrypted data; and sending the request containing the encrypted character string to the gateway, so that the gateway decrypts the request containing the encrypted character string, and judging whether the request is a replay attack or not according to a decryption result. According to the method, the encryption character string is added in the request, so that the encryption calculation result is random enough, brute force cracking can be resisted, and the safety performance is effectively improved; the reversible encryption algorithm is small in calculation result, high in calculation speed, small in system resource occupation, easy to implement and wide in application scene.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for preventing replay attacks, a device for preventing replay attacks and a system for preventing replay attacks. Background technique [0002] With the enhancement of Internet active protection technology, traditional attack methods such as the use of security holes, violent databases, and DDOS (Distributed Denial of Service: Distributed Denial of Service Attacks) have gradually decreased. harder to identify. Replay attack is one of the most concealed network attack methods. Attackers use network monitoring or other methods to steal API requests, perform certain processing, and then resend them to the authentication server. This attack will continue to be malicious or fraudulent. Indiscriminately repeating a valid API request, causing confusion and costly damage to business relationships. The defense method against the replay attack includes two ways of verif...

AI Technical Summary

Problems solved by technology

Replay attack is one of the most concealed network attack methods. Attackers use network monitoring or other methods to steal API requests, perform certain processing, and then resend them to the authentication server. This attack will continue to be malicious or fraudulent. Indiscriminately repeating a valid API request, causing confusion and significant damage to business relationships

The defense method against the replay attack includes two ways of verifying the identity of the sender and identifying the additional information of the message, and the processing method of the additional information of the message includes adding random numbers, adding time stamps, adding serial numbers, etc., the prior art Generally, it is a comprehensive application of the above methods, but there are still contradictions between safety performance, maintenance cost and operating efficiency

Images