Method and device for forwarding hyper text transport protocol (HTTP) request

Abstract

The invention relates to a method and a device for forwarding a hyper text transport protocol (HTTP) request. The method comprises the steps of: judging whether a uniform resource locator (URL) of the HTTP request of a Web client is a URL requested by a Web form or a URL submitted by Web form data or not; forwarding the HTTP request when the URL of the HTTP request is the URL requested by the Web form and effective tokens are carried in parameters of the URL of the HTTP request; randomly generating a unique token if the token is not carried, splicing the URL of the HTTP request and the generated token into a new URL, discarding the HTTP request, and sending an HTTP response message requesting the redirection to the new URL to the Web client; and forwarding the HTTP request when the URL of the HTTP request is the URL submitted by Web form data, the HTTP request has the referrer value and the effective token can be extracted from the referrer. The method and the device have the advantages that the effective defense on cross site request forgery (CSRF) attack can be realized, and the computation overhead on a Web security gateway is greatly reduced.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method and device for forwarding HTTP requests. Background technique [0002] After nearly two decades of development, the current scale of the Internet has become very large, especially the Web business, which is one of the main services of the Internet, has achieved rapid development, which has brought great convenience for people to obtain information. At the same time, the security status of those Web sites that provide people with Web services is worrying. Common security issues include SQL (Structured Query Language, Structured Query Language) injection attacks, cross-site scripting attacks, and cross-site request forgery. SQL injection attacks and cross-site scripting attacks are caused by the fact that web applications do not perform strict filtering when using data submitted by users. Therefore, these two types of web security attacks are less and less. CSRF (Cross S...

AI Technical Summary

Problems solved by technology

[0019] The above-mentioned first two traditional CSRF defense methods implemented on the Web security gateway can effectively defend against CSRF attacks, but they all require the Web security gateway to modify the Web form in the Web page returned to the Web client by the Web application system in real time.

To modify the Web form in the Web page, the complete Web gateway must perform a series of complex operations such as DOM (Document Object Model, Document Object Model) tree analysis, Web form location, and Web form modification on the Web page, which will greatly reduce Web security. Gateway performance

What's more complicated is that the Web forms in some Web pages are generated by client-side scripts (such as Javascript). To realize the correct positioning and modification of this type of Web forms requires the Web security gateway to support client-side script interpretation. Difficult to achieve

The third Referer verification method has the risk of being bypassed by the attacker forging the Referer value, so it can only be used as an auxiliary verification method

Images