Intelligentized multilayer filtering safety device and method

Abstract

The invention discloses an intelligentized multilayer filtering safety device and an intelligentized multilayer filtering safety method. The intelligentized multilayer filtering safety device comprises a request source check module, a uniform resource locator (URL) check module, a parameter value check module and an uploading file check module. The intelligentized multilayer filtering safety method comprises the following steps of: S1, sending a request received by a web system to a filter; S2, checking the source of the request in the filter, verifying whether the request is an internal link of the system or not, if so, performing the step S3, and otherwise, giving up processing; S3, performing URL check on the request, namely checking whether the request has sensitive characters or not, judging whether the URL is legal or not, if so, performing the step S4, and otherwise, giving up processing; S4, performing the check of parameter values on the request, namely checking whether the parameter values contain illegal contents or not, judging whether the parameter values are legal or not, if so, performing the step S5, and otherwise, giving up processing; and S5, checking files to be uploaded, judging whether the uploaded files are legal or not, and if so, responding to the request.

Description

technical field [0001] The invention relates to the field of network technology and safety, in particular to an intelligent multi-layer filtering safety device and method. Background technique [0002] In the web system, hackers can attack the system or steal information in various ways. In order to prevent the system from being attacked or information from being stolen, filtering devices are generally used, but the existing filtering devices have the following disadvantages: [0003] 1. Most systems use specific functions for verification, and there is no unified verification function, which is likely to cause omissions. [0004] 2. Most systems only filter special characters, without comprehensive and multi-layer filtering. [0005] 3. Most systems perform verification when they are actually processed, and it cannot be said that illegal requests are filtered before they are submitted for processing. [0006] This means that the existing filtering device cannot effectivel...

AI Technical Summary

Problems solved by technology

[0003] 1. Most systems use specific functions for verification, and there is no unified verification function, which is likely to cause omissions

[0004] 2. Most systems only filter special characters, without comprehensive and multi-layer filtering

[0005] 3. Most systems are verified when they are actually processed, and illegal requests cannot be filtered before they are submitted for processing

[0006] This means that the existing filtering device cannot effectively save system resources, nor can it comprehensively and completely prevent illegal attacks

Images