Dynamic protection method and device based on Web application firewall and electronic equipment

By using dynamic token verification technology in the Web application firewall, the existing BOT protection solution is solved in the insufficient face of complex network attacks, and efficient security protection for web applications is achieved.

CN120151067APending Publication Date: 2025-06-13CHINA TELECOM NETWORK SECURITY TECH CO LTD
0 Cites 1 Cited by

Patent Information

Application Number
CN202510389173.5
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-03-28
Publication Date
2025-06-13

AI Technical Summary

Technical Problem

The existing BOT protection scheme seems insufficient in the face of complex network attacks. Attackers can bypass detection by forging user agent characters or simulating normal IP address behavior, and relying solely on AI behavior analysis may be deceived by carefully designed automated scripts, resulting in the security of web applications being threatened.

Method used

Using a dynamic protection method based on the Web application firewall, browser attributes, user behavior information, request content and timestamp information are collected through JavaScript files, a dynamic token is generated, and attached to the dynamic request, and the validity of the token is verified through the Web application firewall to determine the authenticity and security of the request.

Benefits of technology

It improves the security of web applications, can effectively identify and block malicious requests, prevent BOT attacks, and enhances the ability to accurately identify access sources.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention provides a dynamic protection method and device based on a Web application firewall and electronic device.The method is applied to a client side in communication connection with the Web application firewall and comprises the steps that a dynamic request initiated by a browser for a target webpage address is intercepted; the method comprises the following steps: generating a dynamic token through information collected by a JavaScript file; the dynamic token does not appear in a local preset time period and is used for uniquely identifying the identity of the dynamic request; the JavaScript file is from the Web application firewall, and the JavaScript file is loaded on the client side; adding the dynamic token to the dynamic request to obtain a first request; and sending the first request to the Web application firewall, so that the Web application firewall verifies the validity of the dynamic token in the first request.
Need to check novelty before this filing date? Find Prior Art