Web Service Malicious Request Redirection to Mitigation Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional web service protection methods, such as blocking malicious IP addresses, are ineffective against automated attacks as attackers can easily change their IP or switch tools, leading to continuous attacks.
Innovation Solution
Implementing a redirection system that intercepts malicious web requests and redirects them to an isolated mitigation server, which generates artificial content mimicking the web server's responses, thereby fooling attackers without burdening the real web servers or databases.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional blocking methods are used to protect web servers, then security is improved, but attackers can easily change IP addresses or switch tools, making the protection ineffective
Solution Approach 1:
The patent creates a copy of the web server's response behavior through a mitigation server. Instead of blocking attacker requests, the system generates artificial content that mimics genuine server responses, allowing the attacker to believe their attack is successful while the real server remains protected. This copying approach makes the defense adaptable to various attack types without requiring direct engagement with attackers.
2Reliability
If web servers process all incoming requests directly, then response accuracy is maintained, but malicious requests can overwhelm the server
Solution Approach 1:
The patent introduces a mitigation server as an intermediary between attackers and the real web server. This mediator receives and processes malicious requests, generating artificial responses that appear genuine. The real server only handles legitimate traffic, maintaining response accuracy without being overwhelmed by malicious requests. The intermediary preserves the appearance of direct server-response while protecting server capacity.
3Speed
If IP blocking is implemented, then immediate attack prevention is achieved, but attackers simply change their IP addresses and continue attacking
Solution Approach 1:
The patent converts the harm of attack traffic into a beneficial security measure. Instead of treating all non-IP-based defenses as slow or unreliable, the system uses the attack requests themselves to trigger artificial response generation. The malicious traffic, which would normally be harmful, becomes the mechanism for activating protective measures. This approach maintains fast response times while achieving reliable long-term security through behavioral analysis rather than static IP blocking.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Techniques to facilitate prevention of malicious attacks on a web service are disclosed herein. In at least one implementation, a computing system intercepts a web request directed to a web server providing the web service. The computing system identifies whether or not the web request is malicious. When the web request is identified as malicious, the computing system redirects the web request to an isolated mitigation server configured to mimic responses of the web server. The isolated mitigation server processes the web request to generate artificial content based on the web request that appears to be genuine content provided by the web server, and presents the artificial content in response to the web request.