Security detection method, security detection device, electronic equipment and medium

Abstract

The embodiment of the invention provides a security detection method, a security detection device, electronic equipment and a computer readable medium. Relates to the technical field of network communication. The method comprises the following steps: carrying out light splitting processing on flow between a client and a server, obtaining a transmission request sent by the client, and determining a protocol type of the transmission request; extracting a target transmission request of which the protocol type is HTTP2, determining whether the target transmission request contains an end mark, and when the target transmission request contains the end mark, obtaining request data from the transmission request; recombining the target transmission request and the request data to convert the target transmission request into a to-be-detected request of which the protocol type is HTTP1; and jointly performing security detection on the to-be-detected request through the security detection rule of the HTTP1 to determine a security detection result of the client. According to the embodiment of the invention, under the condition that the protocol type is HTTP2, security detection can still be carried out on the transmission request, security vulnerabilities are repaired, and the security is improved.

Description

technical field [0001] The present disclosure relates to the field of network communication, and in particular, to a security detection method, a security detection device, an electronic device, and a computer-readable medium. Background technique [0002] Due to the characteristics of HTTP1's high latency, stateless connection, and plaintext transmission, communication based on the HTTP1 protocol suffers from slow page loading, excessively large headers, wasteful cost, and insecurity. In order to overcome the problems existing in HTTP1, HTTP2 divides the request and response data into smaller frames and transmits them in binary format, and compresses the header, which greatly improves the data transmission performance. [0003] At present, the security detection of application firewalls is mainly aimed at HTTP1, which can only detect single packets, such as request packets, response packets, etc., because the HTTP2 protocol divides an HTTP request into multiple streams for ...

AI Technical Summary

Problems solved by technology

[0003] At present, the security detection of the application firewall is mainly for HTTP1, which can only detect a single packet, such as a request packet, a response packet, etc., because the HTTP2 protocol divides an HTTP request into multiple streams for distribution, resulting in the use of HTTP2 features to bypass In the case of over-detection, there is a greater security risk

Images