HTTP request entrainment detection method, device, electronic device and storage medium
By generating preset field sets and string sets, parsing and matching the content of HTTP requests, the problem of difficult to detect HTTP request entrainment attacks in the prior art is solved, and efficient and accurate detection effects are achieved, reducing security risks.
CN115967575BActive Publication Date: 2025-03-28WUHAN GREENET INFORMATION SERVICE
2 Cites 0 Cited by
Patent Information
- Application Number
- CN202211720186.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-12-30
- Publication Date
- 2025-03-28
- Estimated Expiration
- 2042-12-30
AI Technical Summary
Technical Problem
The prior art is difficult to effectively detect and defend against HTTP request entrained attacks, resulting in security risks.
Method used
By analyzing the commonalities of HTTP requests that are entangled with attacks, generating a preset field set and a preset string set, parsing the request header and request body of the target HTTP request, matching the contents of the preset fields and string sets, and determining whether the request is entangled with an attack.
Benefits of technology
It realizes simple and efficient detection of whether HTTP requests are entrained by attacks, improves detection accuracy and reduces security risks.
✦ Generated by Eureka AI based on patent content.
Abstract
The present application provides a method, device, electronic device and storage medium for detecting HTTP request inclusion. The method first determines that the request header of the inclusion attack will carry a specific number and content of CL fields and TE fields, and the request body of the inclusion attack will carry a specific number, position and content of request line strings and end block strings, and then generates a preset field set and a preset string set based on these contents. After receiving the target HTTP request, it is first parsed into target request header data and target request body, and the target request header data is parsed into multiple header fields, and then the header field is matched with each preset field in the preset field set, and whether the request header contains an inclusion attack is determined according to the number of successful matches. If not, the request body is matched with each preset string in the preset string set, and whether the request body contains an inclusion attack is determined according to the number of successful matches. The present application can simply and efficiently detect whether a request contains an inclusion attack.
Need to check novelty before this filing date? Find Prior Art