Dynamic Script Allocation for Server Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network security measures are inadequate as attackers can exploit static script code to simulate valid service requests, leading to server overload and service refusal, compromising security.
Innovation Solution
A method and device that dynamically and randomly allocate page scripts for browser requests, verifying script execution parameters in page verification requests to prevent unauthorized access, rejecting invalid requests and expiring requests that exceed a predetermined time period.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static script code is used for token encryption verification, then the server can verify service requests, but the script code is exposed in plaintext allowing attackers to parse encryption methods and simulate valid requests
Solution Approach 1:
The patent applies dynamics by transforming static script code into dynamic script code. The server dynamically generates and executes script code to obtain execution parameters, which are then sent to the browser. This dynamic generation prevents the script from being exposed in plaintext in the source code, as it is created at runtime rather than being statically embedded. This resolves the contradiction by maintaining verification reliability while eliminating script exposure vulnerability.
2Object-affected harmful factors
If dynamic and random script allocation is implemented, then attackers cannot parse encryption methods within a predetermined time period, but the server requires additional verification steps increasing processing time
Solution Approach 1:
The patent applies preliminary action by pre-generating multiple different script codes and storing them in the server before actual requests arrive. When a request comes in, the server randomly selects and executes one of the pre-generated scripts. This preliminary preparation allows the server to quickly respond to requests without performing complex script generation at request time, thus preventing attacks while minimizing additional processing time.
3Reliability
If the server verifies script execution parameters from dynamically allocated scripts, then security is improved, but the device complexity increases due to dynamic script management
Solution Approach 1:
The patent applies segmentation by dividing the script verification process into distinct modules: script generation module, script execution module, parameter extraction module, and verification module. Each module handles a specific aspect of the verification process independently. This segmentation makes the complex system more manageable and maintainable while ensuring comprehensive security verification through coordinated operation of specialized components.
Data Source
AI summary
A page request is received from a browser. A page script corresponding to the page request is allocated from a plurality of page scripts corresponding to the page request. The page script is transmitted to the browser for generation of a script execution parameter by execution of the page script by the browser. A page verification request is received from the browser, where the page verification request includes the script execution parameter. Whether a page verification request is expired is determined, where if the page verification request is expired, generating error prompt information indicating a page expiration. If the page verification request is not expired, whether the script execution parameter is valid, is determined. If the script execution parameter is valid, the validity is indicated, otherwise the page request is rejected.