Website security comprehensive protection method and system based on domain name, medium and equipment

Abstract

The invention provides a website security comprehensive protection method and system based on a domain name, a medium and equipment, and the method comprises the following steps: obtaining editing operation data of a user, the editing operation data at least comprising a target domain name and configuration data; a domain name deployment mode is identified based on the editing operation data, the deployment mode comprises automatic deployment and user deployment, and when the domain name is automatically deployed, the ownership and the certificate of the target domain name are verified to generate a redirected domain name to complete security configuration; when a user deploys a domain name, extracting configuration data in the editing operation data to complete security configuration; and after domain name deployment and security configuration are completed, performing visual display on the target domain name based on a preset interface. According to the website security comprehensive protection method and system based on the domain name, the medium and the equipment, multiple security protection mechanisms can be integrated, the configuration process can be simplified, and convenient and efficient acceleration and security protection services are provided for users.

Description

Technical Field

[0001] The present invention belongs to the technical field of data processing, and in particular relates to a domain name-based website security comprehensive protection method, system, medium and equipment. Background Art

[0002] With the popularization of the Internet, more and more small and medium-sized websites are facing three major technical difficulties in operation. The first is the access speed problem: limited by server bandwidth, geographical distribution and network congestion, the access speed of users of small and medium-sized websites is often slow, especially when accessing across regions, the delay problem is more obvious; the second is the network security problem: small and medium-sized websites usually lack perfect security protection measures and are vulnerable to DDoS (Distributed Denial of Service) attacks. The first is to prevent threats such as distributed denial of service (DDoS) attacks, SQL injection, cross-site scripting (XSS), etc., which may lead to data leakage or service interruption. The third is unified management of certificates: Nowadays, it is generally necessary to install SSL (Secure Socket Layer) certificates for website access. If small and medium-sized enterprises have multiple websites and multiple certificates, it is not easy to manage and replace them.

[0003] At present, among the existing solutions to the above problems, although CDN (Content Delivery Network) and WAF (Web Application Firewall) can optimize access speed and enhance security, their deployment and configuration process is complicated and requires users to be familiar with technical details such as network protocols, domain name resolution, and rule configuration, which brings a high threshold to small and medium-sized websites with limited technical capabilities. Therefore, how to simplify the configuration process while solving the above problems needs to be solved urgently. Summary of the invention

[0004] In view of the above-mentioned shortcomings of the prior art, the purpose of the present invention is to provide a domain name-based website security comprehensive protection method, system, medium and device for solving the problem of how to perform security protection for the above-mentioned small and medium-sized websites.

[0005] In a first aspect, the present invention provides a domain name-based website security integrated protection method, the method comprising the following steps:

[0006] Acquire the user's editing operation data, wherein the editing operation data at least includes a target domain name and configuration data;

[0007] Based on the editing operation data, a domain name deployment mode is identified, where the deployment mode includes automatic deployment and user deployment, wherein:

[0008] When automatically deploying a domain name, verify the ownership and certificate of the target domain name to generate a redirected domain name to complete the security configuration; when a user deploys a domain name, extract the configuration data in the editing operation data to complete the security configuration;

[0009] After completing the domain name deployment and security configuration, the target domain name is visualized based on a preset interface.

[0010] In this implementation, two domain name deployment methods are described. Among them, the automatic deployment method only requires the user to provide the target domain name to enable the acceleration and security protection functions, avoiding complex rule writing and application environment adjustment. It can automatically complete the configuration work and reduce human errors. At the same time, it retains the user deployment method, thereby supporting applications of various website types and scales, and is particularly suitable for small and medium-sized website users with limited computing resources.

[0011] In a possible implementation of the present application, obtaining the user's editing operation data specifically includes:

[0012] Acquire the editing operation of the user on the preset interface to obtain the editing operation data, wherein:

[0013] Obtaining the target domain name based on the domain name parameter input by the user;

[0014] The configuration data is obtained based on configuration parameters input and / or selected by the user, wherein the configuration data at least includes the target domain name, domain name ownership verification configuration parameters, source site and certificate configuration parameters, and security rule configuration parameters.

[0015] In a possible implementation of the present application, the identifying the domain name deployment mode based on the editing operation data specifically includes:

[0016] The access mode selection type is identified based on the editing operation of the user on the preset interface, wherein:

[0017] If the user selects the first method, the target domain name is extracted for automatic deployment;

[0018] If the user selects the second method, the configuration data is extracted to perform user configuration deployment.

[0019] In a possible implementation of the present application, when the domain name is automatically deployed, the ownership and certificate of the target domain name are verified to generate a redirection domain name to complete the security configuration, which specifically includes:

[0020] Verify the ownership of the domain name, randomly generate a domain name verification record value, and compare the record value with the resolution record in the network server to verify the correctness of the target domain name;

[0021] Automatically configure the content distribution network to obtain the redirection domain name, wherein the configuration content includes certificate verification, static acceleration configuration and access control configuration;

[0022] Monitor the website access data of the redirected domain name, and perform security checks in combination with the cache rules and security access rules of the content distribution network to complete the security configuration.

[0023] In this implementation, when automatically deploying domain names, content acceleration and website security protection functions, as well as certificate management replacement, can be achieved through a single processing platform, avoiding multiple switching operations between different platforms in traditional methods, thereby improving the user experience.

[0024] In a possible implementation of the present application, when the user deploys the domain name, the configuration data in the editing operation data is extracted to complete the security configuration, which specifically includes:

[0025] Obtaining a content distribution network verification value based on the target domain name, and adding a network server where the target domain name is located;

[0026] Obtaining a verification file and adding it to the network root directory of the content distribution network, and performing domain name ownership verification based on the domain name ownership verification configuration parameters;

[0027] Configuring the source site address and request protocol of the content distribution network based on the source site and certificate configuration parameters, thereby obtaining a redirection domain name generated by the content distribution network;

[0028] Based on the security rule configuration parameters, the acceleration rules and security rules are configured to complete the security configuration of the domain name deployed by the current user.

[0029] In a possible implementation of the present application, when a user deploys a domain name, the method further includes: performing network security configuration based on template configuration parameters selected by the user.

[0030] In a possible implementation of the present application, after completing the domain name deployment and security configuration, the target domain name is visually displayed based on a preset interface, specifically including:

[0031] Based on the preset interface, a page corresponding to the address of the target domain name is visually displayed, wherein:

[0032] During the display process, the website access performance parameters, security event record data and protection effect parameters of the current page are extracted for synchronous visual display.

[0033] In a second aspect, the present invention provides a domain name-based website security integrated protection system, the system comprising:

[0034] An acquisition module, used to acquire the user's editing operation data, wherein the editing operation data at least includes a target domain name and configuration data;

[0035] An identification module is used to identify a domain name deployment mode based on the editing operation data, wherein the deployment mode includes automatic deployment and user deployment, wherein:

[0036] A deployment module, used to verify the ownership and certificate of the target domain name when automatically deploying the domain name, so as to generate a redirected domain name to complete the security configuration; and to extract the configuration data in the editing operation data to complete the security configuration when the user deploys the domain name;

[0037] The display module is used to visually display the target domain name based on a preset interface after completing the domain name deployment and security configuration.

[0038] In a third aspect, the present invention provides an electronic device, the electronic device comprising: a processor and a memory;

[0039] The memory is used to store computer programs;

[0040] The processor is used to execute the computer program stored in the memory so that the electronic device executes the above-mentioned domain name-based website security comprehensive protection method.

[0041] In a fourth aspect, the present invention provides a computer-readable storage medium having a computer program stored thereon, which, when executed by an electronic device, implements the above-mentioned domain name-based comprehensive website security protection method.

[0042] As described above, the domain name-based website security comprehensive protection method, system, medium and device of the present invention have the following beneficial effects: they can integrate multiple security protection mechanisms and simplify the configuration process, and provide users with convenient and efficient acceleration and security protection services, among which, there are the following beneficial effects:

[0043] (1) Quick deployment: users only need to complete simple domain name resolution configuration to enable acceleration and protection functions, avoiding complex rule writing and environment adjustment.

[0044] (2) Functional integration, which implements content acceleration and security protection functions on a single platform, as well as certificate management replacement, to avoid switching between multiple platforms and improve user experience;

[0045] (3) High degree of intelligence, including being able to automate most configuration tasks, reducing human errors, and improving service quality through intelligent scheduling and dynamic protection;

[0046] (4) It has wide applicability, including the ability to support a variety of website types and sizes, and is especially suitable for small and medium-sized website users with limited technical capabilities. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 Shown is a schematic diagram of a scene of an electronic device of the present invention in an embodiment;

[0048] Figure 2 Shown is a schematic diagram of the steps of a domain name-based website security integrated protection method in one embodiment of the present invention;

[0049] Figure 3 Shown is a flow chart of a domain name-based website security integrated protection method in one embodiment of the present invention;

[0050] Figure 4 Shown is a schematic diagram of the steps of a domain name-based website security integrated protection method in one embodiment of the present invention;

[0051] Figure 5 Shown is a schematic diagram of a resolution record in an embodiment of a domain name-based website security integrated protection method of the present invention;

[0052] Figure 6 Shown is a schematic diagram of the steps of a domain name-based website security integrated protection method in one embodiment of the present invention;

[0053] Figure 7 Shown is a schematic diagram of the structure of a domain name-based website security integrated protection system in one embodiment of the present invention;

[0054] Figure 8 It is a schematic structural diagram of an electronic device of the present invention in one embodiment. DETAILED DESCRIPTION

[0055] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0056] It should be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present invention, and thus the drawings only show components related to the present invention rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0057] The following embodiments of the present invention provide a comprehensive website security protection method based on domain names, which can be applied to Figure 1 The electronic device shown, wherein a corresponding data processing platform is installed in the electronic device, such as the Rui'an Shield platform, and the target domain name of the user's editing operation is automatically deployed and securely configured through the Rui'an Shield platform, and the user deployment and security configuration can also be performed based on the target domain name and configuration data of the user's editing operation, so that after completing the domain name deployment and security configuration, the web page interface corresponding to the target domain name can be visualized. The electronic device described in the present invention may include a mobile phone 11, a tablet computer 12, a laptop computer 13, a wearable device, a vehicle-mounted device, an augmented reality (AR) / virtual reality (VR) device, an ultra-mobile personal computer (UMPC), a netbook, a personal digital assistant (PDA), etc., and the embodiment of the present invention does not impose any restrictions on the specific type of electronic equipment.

[0058] The technical solutions in the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0059] Specifically, see Figure 2 In one embodiment of the invention, the domain name-based website security comprehensive protection method of the present invention includes the following steps:

[0060] Step S202, obtaining the user's editing operation data, wherein the editing operation data at least includes a target domain name and configuration data;

[0061] Step S204, identifying a domain name deployment mode based on the editing operation data, wherein the deployment mode includes automatic deployment and user deployment;

[0062] Step S206, when automatically deploying a domain name, verifying the ownership and certificate of the target domain name to generate a redirected domain name to complete security configuration; when a user deploys a domain name, extracting configuration data in the editing operation data to complete security configuration;

[0063] Step S208, after completing the domain name deployment and security configuration, the target domain name is visually displayed based on a preset interface.

[0064] It should be noted that in this embodiment, in order to achieve acceleration and security protection for small and medium-sized websites, users are provided with two domain name deployment methods, and network security configurations of CDN acceleration, security functions and certificate management are integrated based on different domain name deployment methods, thereby simplifying user operations through function integration and automated configuration.

[0065] Specifically, an intuitive user operation interface (preset interface) is provided for user operation to obtain the user's editing operation data, wherein the acquired editing operation data includes at least the target domain name and configuration data, wherein the domain name deployment method is identified based on the editing operation data actually operated by the user, and there are two specific methods, corresponding to automatic deployment and user deployment, wherein, when automatically deploying the domain name, it includes verifying the ownership and certificate of the target domain name to generate a redirect domain name (cname) to complete the security configuration; and when the user deploys the domain name, the security configuration is completed based on the configuration data. The specific configuration process will be described in the subsequent manual. After completing the domain name deployment and security configuration, the current target domain name can be visualized based on the user operation interface, wherein automated deployment can reduce human errors and improve service quality.

[0066] Furthermore, in one embodiment of the invention, obtaining the user's editing operation data specifically includes:

[0067] Acquire the editing operation of the user on the preset interface to obtain the editing operation data, wherein:

[0068] Obtaining the target domain name based on the domain name parameter input by the user;

[0069] The configuration data is obtained based on configuration parameters input and / or selected by the user, wherein the configuration data at least includes the target domain name, domain name ownership verification configuration parameters, source site and certificate configuration parameters, and security rule configuration parameters.

[0070] It should be noted that, in this embodiment, when the user performs actual operations on the user operation interface, the editing operation data of the user on the preset interface (user operation interface) can be obtained, and the specific content obtained includes the input domain name parameters and the input and / or selected configuration parameters. Specifically, the target domain name is obtained based on the domain name parameters input by the user, and the configuration data is obtained based on the configuration parameters input and / or selected by the user, wherein the configuration data includes at least the target domain name, domain name ownership verification configuration parameters, source site and certificate configuration parameters, and security rule configuration parameters.

[0071] Further, in an embodiment of the invention, the identifying the domain name deployment mode based on the editing operation data specifically includes:

[0072] The access mode selection type is identified based on the editing operation of the user on the preset interface, wherein:

[0073] If the user selects the first method, the target domain name is extracted for automatic deployment;

[0074] If the user selects the second method, the configuration data is extracted to perform user configuration deployment.

[0075] It should be noted that, in this embodiment, Figure 3 As shown, it is displayed as a flowchart for identifying the domain name deployment method, wherein the domain name deployment is performed based on the access method selected by the user, wherein the access method corresponds to a first method and a second method, specifically, the selected access method type is identified based on the user's editing operation on the preset interface, that is, when the user selects the first method, the target domain name input by the user is extracted for automatic deployment, and when the user selects the second method, the configuration parameters input and / or selected by the user are extracted for user configuration, wherein, if the user selects the first method, it corresponds to automatic deployment, specifically adding the resolution record of the target domain name to the corresponding processing platform (such as the Rui'an Shield platform), and then automatically turning on the Rui'an Shield acceleration and security protection functions; if the user selects the second method, it corresponds to autonomous deployment for the user, thereby generating a corresponding redirection domain name (cname) according to the target domain name provided by the user, and parsing different configuration parameters to the corresponding domain name service provider to complete security protection.

[0076] Further, in one embodiment of the invention, if Figure 4 As shown, when the domain name is automatically deployed, the ownership and certificate of the target domain name are verified to generate a redirection domain name to complete the security configuration, which specifically includes the following steps:

[0077] Step S402, verifying the domain name ownership, randomly generating a domain name verification record value, and comparing the record value with the resolution record in the network server to verify the correctness of the target domain name;

[0078] Step S404, automatically configuring the content distribution network to obtain a redirection domain name, wherein the configuration content includes certificate verification, static acceleration configuration, and access control configuration;

[0079] Step S406, monitoring the website access data of the redirected domain name, and performing security detection in combination with the cache rules and security access rules of the content distribution network to complete the security configuration.

[0080] It should be noted that, in this embodiment, it is specifically described how to perform security configuration when performing automatic deployment, including verifying the domain name ownership, that is, randomly generating a domain name verification record value, and then comparing the record value with the resolution record in the network server to verify the correctness of the target domain name, wherein a random DNS (Domain Name System) verification record value is generated, and then a resolution record with a record type of TXT, a host record of DNSverify, and a record value of the generated random DNS verification record value is added to the DNS server to verify the correctness of the domain name ownership.

[0081] Furthermore, it also includes automatic configuration of the content distribution network to obtain a redirection domain name, wherein the configuration content includes certificate verification, static acceleration configuration and access control configuration, wherein, during certificate verification: the user server IP address is obtained from the record value of the resolution record added by the user as the back-to-source address of the content delivery network (Content Delivery Network, CDN) acceleration, and then the user certificate management library is checked to see whether the certificate has been uploaded, wherein, if the certificate has been uploaded, the back-to-source protocol is configured as: "https, port 443", and if there is no certificate, the back-to-source protocol is configured as: "http, port 80", wherein the request protocol of the corresponding website is also set to "http" or "https" according to whether the certificate has been uploaded; during static acceleration configuration: cache templates for commonly used types of websites are pre-configured, such as image files (.jpg, .png, .gif), style files (css, js, xml), audio files (wmv, MP3 ), and page files (.html), etc. When acceleration is turned on, the template of the cache file is automatically read according to the corresponding website type to initialize the file type that needs to be cached for static acceleration; when configuring access control: pre-configure the rules that need to be intercepted by default, and the whitelist file for default filtering. When the processing platform (such as the Ruian Shield platform) is started, the configuration file is automatically read to enable the access control rules. After processing the above configuration rules, the redirection domain name (cname) generated by the processing platform is obtained, and then a resolution record of type cname is automatically added to the DNS server, and the user's own resolution record is suspended for replacement. Among them, such as Figure 5 As shown, a resolution record of type cname is automatically added to the DNS server.

[0082] Furthermore, it also includes monitoring the website access data of the redirected domain name, and performing security checks in combination with the cache rules and security access rules of the content distribution network to complete the security configuration, wherein the access situation of the website is monitored according to the current cname, the access is accelerated according to the configured cache rules of the content distribution network, and the configured security access rules are used for security checks.

[0083] Further, in one embodiment of the invention, if Figure 6 As shown, when the user deploys the domain name, the configuration data in the editing operation data is extracted to complete the security configuration, which specifically includes the following steps:

[0084] Step S602, obtaining a content distribution network verification value based on the target domain name, and adding a network server where the target domain name is located;

[0085] Step S604, obtaining a verification file and adding it to the network root directory of the content distribution network, and performing domain name ownership verification based on the domain name ownership verification configuration parameters;

[0086] Step S606, configuring the source site address and request protocol of the content distribution network based on the source site and certificate configuration parameters, thereby obtaining a redirection domain name generated by the content distribution network;

[0087] Step S608, configuring acceleration rules and security rules based on the security rule configuration parameters to complete the security configuration of the domain name deployed by the current user.

[0088] It should be noted that, in this embodiment, it is specifically described how to perform security configuration when performing user deployment. First, the content distribution network verification value is obtained based on the target domain name, and the network server where the target domain name is located is added. That is, when the user performs the actual editing operation, the target domain name of the target website is filled in, and the DNS verification value of the domain name is obtained to add it to the DNS server corresponding to the user-deployed domain name. Then the verification file is obtained and added to the network root directory of the content distribution network, and the domain name ownership verification is performed based on the domain name ownership verification configuration parameters.

[0089] Furthermore, the source site address and request protocol of the content distribution network are configured based on the source site and certificate configuration parameters, so as to obtain the redirection domain name generated by the content distribution network, that is, the back-to-source protocol is set based on the source site and certificate configuration parameters, and the request protocol of the website is configured based on the certificate uploaded and input by the user, so as to wait for the redirection domain name to be generated, and then the redirection domain name is configured to the DNS server where the domain name is located, the original resolution record is suspended, and the newly added redirection domain name record is started.

[0090] Furthermore, acceleration rules and security rules are configured based on the security rule configuration parameters to complete the security configuration of the domain name deployed by the current user, wherein the security rule configuration parameters include file types that the user has selected to cache and security rules that the user has added to protect. Therefore, acceleration rules are configured based on file types that the user has selected to cache, and security rules are configured based on security rules that the user has added to protect, thereby completing the security configuration of the domain name deployed by the current user, including firewall settings for security protection.

[0091] Furthermore, in an embodiment of the invention, when a user deploys a domain name, the method further includes: performing network security configuration based on the template configuration parameters selected by the user.

[0092] It should be noted that, in the above-mentioned embodiment, the configuration data at least includes the target domain name, domain name ownership verification configuration parameters, source site and certificate configuration parameters and security rule configuration parameters, and in this embodiment, the configuration parameters also include template configuration parameters selected by the user, wherein, when the user deploys the domain name, network security configuration is performed based on the template configuration parameters selected by the user. Specifically, preset cached configuration templates are provided for common scenarios (such as official websites, blogs and other websites) for users to choose from, thereby further reducing the difficulty of actual editing operations by users.

[0093] Further, in an embodiment of the invention, after completing the domain name deployment and security configuration, the target domain name is visually displayed based on a preset interface, specifically including:

[0094] Based on the preset interface, a page corresponding to the address of the target domain name is visually displayed, wherein:

[0095] During the display process, the website access performance parameters, security event record data and protection effect parameters of the current page are extracted for synchronous visual display.

[0096] It should be noted that the above-mentioned embodiment describes providing an intuitive user operation interface (preset interface) for user operation, and in this embodiment, the page of the address corresponding to the target domain name can be visualized based on the corresponding user operation interface, and in the display process, the website access performance is extracted for parameterized display, and the security events are recorded to obtain recorded data for visualization, and the protection effect of the parameters of each protection interception is visualized.

[0097] The embodiment of the present application also provides a domain name-based website security comprehensive protection system, which can implement the domain name-based website security comprehensive protection method described in the present application. However, the implementation device of the domain name-based website security comprehensive protection method described in the present application includes but is not limited to the structure of the domain name-based website security comprehensive protection system listed in the present embodiment. All structural deformations and replacements of the prior art made according to the principles of the present application are included in the protection scope of the present application.

[0098] See also Figure 7 In one embodiment, this embodiment provides a domain name-based website security integrated protection system 70, the system comprising:

[0099] An acquisition module 71 is used to acquire the user's editing operation data, where the editing operation data at least includes a target domain name and configuration data;

[0100] The identification module 72 is used to identify the domain name deployment mode based on the editing operation data, and the deployment mode includes automatic deployment and user deployment, wherein:

[0101] The deployment module 73 is used to verify the ownership and certificate of the target domain name when automatically deploying the domain name to generate a redirected domain name to complete the security configuration; and to extract the configuration data in the editing operation data to complete the security configuration when the user deploys the domain name;

[0102] The display module 74 is used to visually display the target domain name based on a preset interface after completing the domain name deployment and security configuration.

[0103] Since the specific implementation of this embodiment corresponds to the aforementioned method embodiment, the same details will not be repeated here, and those skilled in the art should also understand that Figure 7 The division of the modules in the embodiment is merely a division of logical functions, and in actual implementation, all or part of them can be integrated into one or more physical entities, and these modules can be implemented entirely in the form of software called by processing elements, or entirely in the form of hardware, or some modules can be implemented in the form of software called by processing elements, and some modules can be implemented in the form of hardware.

[0104] In the several embodiments provided by the present invention, it should be understood that the disclosed system, device or method can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules / units is only a logical function division, and there may be other division methods in actual implementation, such as multiple modules or units can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules or units, which can be electrical, mechanical or other forms.

[0105] The modules / units described as separate components may or may not be physically separated, and the components displayed as modules / units may or may not be physical modules, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules / units may be selected according to actual needs to achieve the purpose of the embodiments of the present invention. For example, the functional modules / units in the various embodiments of the present invention may be integrated into one processing module, or each module / unit may exist physically separately, or two or more modules / units may be integrated into one module / unit.

[0106] Those of ordinary skill in the art should further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0107] The embodiment of the present invention also provides a computer-readable storage medium. A person of ordinary skill in the art can understand that all or part of the steps in the method for implementing the above embodiment can be completed by instructing the processor through a program, and the program can be stored in a computer-readable storage medium, and the storage medium is a non-transitory medium, such as a random access memory, a read-only memory, a flash memory, a hard disk, a solid-state hard disk, a magnetic tape, a floppy disk, an optical disc, and any combination thereof. The above storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or a data center that includes one or more available media. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a digital video disc (DVD)), or a semiconductor medium (e.g., a solid-state disk (SSD)), etc.

[0108] An embodiment of the present invention further provides an electronic device, which includes a processor and a memory.

[0109] The memory is used to store computer programs.

[0110] The memory includes: ROM, RAM, disk, USB flash drive, memory card or CD and other media that can store program codes.

[0111] The processor is connected to the memory and is used to execute the computer program stored in the memory so that the electronic device executes the above-mentioned domain name-based website security comprehensive protection method.

[0112] Preferably, the processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

[0113] like Figure 8As shown, the electronic device of the present invention is in the form of a general computing device. The components of the electronic device may include but are not limited to: one or more processors or processing units 81, a memory 82, and a bus 83 connecting different system components (including the memory 82 and the processing unit 81).

[0114] Bus 83 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor or a local bus using any of a variety of bus architectures. For example, these architectures include but are not limited to Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MAC) bus, Enhanced ISA bus, Video Electronics Standards Association (VESA) local bus and Peripheral Component Interconnect (PCI) bus.

[0115] Electronic devices typically include a variety of computer system readable media. These media can be any available media that can be accessed by the electronic device, including volatile and non-volatile media, removable and non-removable media.

[0116] The memory 82 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 821 and / or cache memory 822. The electronic device may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 823 may be used to read and write non-removable, non-volatile magnetic media ( Figure 8 not shown, usually called a "hard drive"). Although Figure 8 Not shown, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, a DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to the bus 83 via one or more data medium interfaces. The memory 82 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present invention.

[0117] A program / utility 824 having a set (at least one) of program modules 8241 may be stored, for example, in the memory 82, such program modules 8241 including but not limited to an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. The program modules 8241 generally perform the functions and / or methods of the embodiments described herein.

[0118] The electronic device may also communicate with one or more external devices (e.g., keyboards, pointing devices, displays, etc.), one or more devices that enable a user to interact with the electronic device, and / or any device that enables the electronic device to communicate with one or more other computing devices (e.g., network cards, modems, etc.). Such communication may be performed via input / output (I / O) interface 84. Furthermore, the electronic device may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via network adapter 85. Figure 8 As shown, the network adapter 85 communicates with other modules of the electronic device via the bus 83. It should be understood that, although not shown in the figure, other hardware and / or software modules can be used in conjunction with the electronic device, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0119] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the art may modify or alter the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or alterations made by a person of ordinary skill in the art without departing from the spirit and technical concept disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. A comprehensive website security protection method based on domain name, characterized in that: include: Acquire the user's editing operation data, wherein the editing operation data at least includes a target domain name and configuration data; Based on the editing operation data, a domain name deployment mode is identified, where the deployment mode includes automatic deployment and user deployment, wherein: When automatically deploying a domain name, verify the ownership and certificate of the target domain name to generate a redirected domain name to complete the security configuration; when a user deploys a domain name, extract the configuration data in the editing operation data to complete the security configuration; After completing the domain name deployment and security configuration, the target domain name is visualized based on a preset interface.

2. The domain name-based website security comprehensive protection method according to claim 1 is characterized in that: The obtaining of the user's editing operation data specifically includes: Acquire the editing operation of the user on the preset interface to obtain the editing operation data, wherein: Obtaining the target domain name based on the domain name parameter input by the user; The configuration data is obtained based on configuration parameters input and / or selected by the user, wherein the configuration data at least includes the target domain name, domain name ownership verification configuration parameters, source site and certificate configuration parameters, and security rule configuration parameters.

3. The domain name-based website security comprehensive protection method according to claim 1 is characterized in that: The identifying the domain name deployment mode based on the editing operation data specifically includes: The access mode selection type is identified based on the editing operation of the user on the preset interface, wherein: If the user selects the first method, the target domain name is extracted for automatic deployment; If the user selects the second method, the configuration data is extracted to perform user configuration deployment.

4. The domain name-based website security comprehensive protection method according to claim 1 is characterized in that: When the domain name is automatically deployed, the ownership and certificate of the target domain name are verified to generate a redirection domain name to complete the security configuration, which specifically includes: Verify the ownership of the domain name, randomly generate a domain name verification record value, and compare the record value with the resolution record in the network server to verify the correctness of the target domain name; Automatically configure the content distribution network to obtain the redirection domain name, wherein the configuration content includes certificate verification, static acceleration configuration and access control configuration; Monitor the website access data of the redirected domain name, and perform security checks in combination with the cache rules and security access rules of the content distribution network to complete the security configuration.

5. The domain name-based website security comprehensive protection method according to claim 2 is characterized in that: When the user deploys the domain name, the configuration data in the editing operation data is extracted to complete the security configuration, which specifically includes: Obtaining a content distribution network verification value based on the target domain name, and adding a network server where the target domain name is located; Obtaining a verification file and adding it to the network root directory of the content distribution network, and performing domain name ownership verification based on the domain name ownership verification configuration parameters; Configuring the source site address and request protocol of the content distribution network based on the source site and certificate configuration parameters, thereby obtaining a redirection domain name generated by the content distribution network; Based on the security rule configuration parameters, the acceleration rules and security rules are configured to complete the security configuration of the domain name deployed by the current user.

6. The domain name-based website security comprehensive protection method according to claim 5 is characterized in that: When the user deploys the domain name, the method further includes: performing network security configuration based on the template configuration parameters selected by the user.

7. The domain name-based website security comprehensive protection method according to claim 1 is characterized in that: After completing the domain name deployment and security configuration, the target domain name is visualized based on a preset interface, specifically including: Based on the preset interface, the page of the address corresponding to the target domain name is visually displayed, wherein during the display process, the website access performance parameters, security event record data and protection effect parameters of the current page are extracted for synchronous visual display.

8. A website security integrated protection system based on domain name, characterized in that: include: An acquisition module, used to acquire the user's editing operation data, wherein the editing operation data at least includes a target domain name and configuration data; An identification module is used to identify a domain name deployment mode based on the editing operation data, wherein the deployment mode includes automatic deployment and user deployment, wherein: A deployment module, used to verify the ownership and certificate of the target domain name when automatically deploying the domain name, so as to generate a redirected domain name to complete the security configuration; and to extract the configuration data in the editing operation data to complete the security configuration when the user deploys the domain name; The display module is used to visually display the target domain name based on a preset interface after completing the domain name deployment and security configuration.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the domain name-based comprehensive website security protection method described in any one of claims 1 to 7 is implemented.

10. An electronic device, characterized in that: The electronic device comprises: a processor and a memory; wherein the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the electronic device executes the domain name-based comprehensive website security protection method as described in any one of claims 1 to 7.

Images