Request detection method and device, storage medium and electronic equipment

Abstract

The invention relates to the field of computer processing, in particular to a request detection method and device, a storage medium and electronic equipment. The request detection method comprises the following steps: receiving a data request, and extracting to-be-detected data corresponding to the data request; identifying whether the to-be-detected data comprises a target generalization field or not based on a generalization field condition in a field generalization rule base; when the to-be-detected data comprises the target generalization field, generalizing the target generalization field based on a generalization rule in the field generalization rule base to obtain generalization data; and checking the generalization data to obtain a checking result of the data request. According to the request detection method provided by the invention, the inspection capability and robustness of the WAF product can be improved.

Description

technical field [0001] The present disclosure relates to the field of computer processing, and in particular, to a request detection method, a request detection device, a storage medium and an electronic device. Background technique [0002] In order to ensure the security of the Internet, network attack defense technology is constantly developing, and there are attack detection or defense products or systems such as intrusion detection, intrusion prevention, and WAF (Web Application Firewall, website application-level intrusion prevention system). When identifying or detecting attacks, these types of attack prevention products will use predefined rule matching technology to detect through rule matching. [0003] However, with the continuous improvement of attack technology, some methods to bypass attack detection have gradually emerged. Since WAF devices are deployed in series, it will have a certain impact on business performance. In order to control the impact within an ...

AI Technical Summary

Problems solved by technology

Since WAF devices are deployed in series, it will have a certain impact on business performance. In order to control this impact within an acceptable range, the predefined rules released by the manufacturer loaded by the general device have certain restrictions on the detection range or detection length.

After multiple technical detection attempts, the attacker may find the threshold of the limit, thereby bypassing the detection of the device and affecting the security of the network

Images