The invention discloses a network protection method and
system based on multi-dimensional behavior
sequence analysis and dynamic reputation modeling. The method comprises the following steps: intercepting a connection request in real time at a
network access point and extracting features; establishing a historical behavior sequence of a dynamic reputation
library storage communication entity; a recursive penalty
algorithm based on a time
decay factor is adopted, and a historical reputation
score, external
threat intelligence and other dimensions are fused to generate a real-time dynamic reputation
score; matching a strategy mapping table according to a preset matching strategy; implementing a push-back coverage mechanism on the requests which are not passed immediately; an overall implementation scheme of cooperative joint defense is used; through an innovative push-back coverage mechanism, the state and the number of
queue items maintained for each abnormal communication entity in the
system are constant and decoupled from the total
attack request amount, the expandability and the anti-pressure ability are extremely high, the cost for resisting flood attacks of any scale can be substantially reduced theoretically, and the method is suitable for popularization and application. And the protection effect on persistent malicious behaviors is obviously improved.