Network Server Asynchronous Access Request Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for web servers to detect and intercept malicious access requests are inefficient, as they require real-time analysis of network layer information and HTTP requests, which slows down service response speed and reduces efficiency.
Innovation Solution
A system comprising a network server and an analysis server, where the network server asynchronously sends access requests to the analysis server for evaluation, allowing it to grant access initially while the analysis server determines whether the user terminal is malicious, and subsequently intercepts requests from identified malicious terminals based on analysis results.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the web server performs real-time analysis of user terminal network layer information or HTTP requests to determine malicious access, then the security detection capability is improved, but the service response speed deteriorates
Solution Approach 1:
The system divides the malicious access detection function into a separate analysis server, isolating it from the network server. The network server handles service requests while the analysis server performs security analysis, allowing both to operate independently without mutual interference to their performance
Solution Approach 2:
The analysis server acts as an intermediary between the network server and user terminals for security analysis. The network server sends user terminal information to the analysis server, which returns analysis results, enabling the network server to maintain fast response while achieving reliable security detection through the mediator
2Reliability
If the web server performs both normal service processing and real-time malicious access analysis, then the security monitoring is improved, but the server efficiency deteriorates
Solution Approach 1:
The system segments server functions by separating service processing (network server) from security analysis (analysis server). This allows each server to specialize in its function and operate at full efficiency without being burdened by the other's tasks
Solution Approach 2:
The analysis server serves as an intermediary that handles all security monitoring tasks, receiving user terminal information from the network server and returning analysis results. This intermediary arrangement enables the network server to maintain high productivity while security monitoring is performed separately
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Analyzing network access requests includes: receiving an access request for service from a user; updating a frequency of access requests associated with the user; receiving an analysis result based at least in part on the access request; determining whether the frequency of access exceeds a predetermined frequency; in the event that the frequency of access does not exceed the predetermined frequency, allowing the access request; and in the event that the frequency of access is greater than the predetermined frequency, determining whether to intercept the access request from the user based at least in part on the analysis result.