Safety defense system of Website

Abstract

The invention relates to a safety defense system of a Website, comprising a flow tractor and a Web safety detector, wherein the flow tractor is connected with a DNS (Domain Name Server) and is used for receiving the DNS domain name analyzing request of a client from the DNS, analyzing the domain name into the IP address of the Web safety detector and then returning to the client; and the Web safety detector is used for receiving HTTP (Hyper Text Transport Protocol) request information and carrying out intrusion detection on the HTTP request information, if no abnormal phenomenon is found, transmitting the HTTP request information to the Website pointed by the HTTP request information. The arrangement position of the safety defense system is not limited by serial arrangement and supports distributed arrangement, the configurations of the Web client and the Web server do not need to be modified so that the cost of safety defense is saved, and the safety defense system has good compatibility and strong scalability.

Description

technical field [0001] The invention relates to the field of network security, in particular to a Web site security defense system. Background technique [0002] The 23rd Statistical Report on Internet Development in China released by China Internet Network Information Center (CNNIC) shows that by the end of 2008, the number of websites in China had reached 2.878 million. In 2008, the number of Chinese websites increased by 91.4% compared with 2007, which was the fastest growth year since 2000. By the end of 2008, the total number of web pages in China exceeded 16 billion, an increase of 90% compared to 2007. The growth rate of the web page is basically the same as the growth rate of the website. [0003] But at the same time, the security situation of domestic Web sites is worrying. According to incomplete statistics, more than 60% of the websites in China have web security vulnerabilities, including various SQL injection vulnerabilities, cross-site scripting vulnerabili...

AI Technical Summary

Problems solved by technology

[0007] The current web application firewall is a gateway device, which must be deployed in front of the web site in a serial manner. This deployment limitation causes a lot of inconvenience in reality;

[0008] At present, many enterprises deploy multiple web sites for business convenience, and these web sites are distributed in different places, so they have to purchase a web application firewall device for each site to ensure the security of each site. This will result in a huge overhead in terms of security;

Images