Command Line Validity Check via Network Address Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for determining command line validity in server/client models are inefficient, as they often consume system resources unnecessarily and lack proper determination standards, making it difficult to accurately assess whether a command line is inputted with ill intent.
Innovation Solution
A method and system that maintain a block network address database to rapidly determine invalid command lines by extracting and analyzing network address information, generating log information, and recording it in a log database, allowing for precise validity assessment using log information and additional determination procedures based on request format and content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If existing methods are used to determine command line validity, then system resources are consumed, but the determination accuracy is insufficient and many resources are wasted unnecessarily
Solution Approach 1:
The system performs preliminary actions by extracting and analyzing network address information before fully processing the command line. It checks whether the network address is blocked in advance, and only generates detailed log information and performs full validity determination for non-blocked addresses, thereby avoiding unnecessary resource consumption while maintaining high determination accuracy.
Solution Approach 2:
The invention extracts network address information from the command line and separates the validity determination process into two stages: first checking the network address against the block database, and only then processing the command line content if the address is not blocked. This extraction and separation approach eliminates redundant processing of blocked addresses.
2Measurement precision
If comprehensive analysis of command lines is performed, then determination accuracy improves, but processing time and system resources increase
Solution Approach 1:
The validity determination process is segmented into multiple stages: (1) extracting network address information, (2) checking against block database, (3) generating log information only for non-blocked addresses, and (4) performing full command line analysis only when necessary. This segmentation allows the system to quickly reject blocked addresses without comprehensive analysis while maintaining accuracy for legitimate commands.
Solution Approach 2:
The system applies partial action by performing only the necessary analysis steps based on the network address check results. For blocked addresses, it stops after the block database check without generating logs or analyzing command content. For non-blocked addresses, it performs comprehensive analysis. This partial action approach optimizes processing time while maintaining determination accuracy.
Data Source
AI summary
A method of determining a command line validity includes maintaining a block network address database including block network address information; receiving a command line from a terminal of a user; extracting network address information included in the command line; determining whether the network address information is the block network address information, with reference to the block network address database; generating log information associated with the command line in case that the network address information is not the block network address information as the result of the determination, in which the log information comprises at least one of the network address information included in the command line, input time point information with respect to the input time point of the command line, and request content information; recording the log information in a log database; and determining the validity of the command line by using the log information.