An HTTP Service Firewall Based on Adaptive Proxy Mechanism

Abstract

The invention relates to the field of firewalls, and aims to provide an HTTP (Hyper Text Transport Protocol) service firewall based on an adaptive agent mechanism. The HTTP service firewall based on the adaptive agent mechanism comprises an agent module, a core control and a security policy database, wherein the agent module is used for accessing HTTP access from a client, acquiring various data, transmitting the acquired data to the core control, and performing execution after receiving a judgment conclusion of the core control; the core control is used for scheduling the cooperation of each module, receiving the request of each module, and updating data records, working modes and working methods in the security policy database; and the security policy database comprises a client permission strategy, a client session state database, a start address white list and a subsequent address white list. Through adoption of the HTTP service firewall, checking work on various security aspects of accidental access, accidental parameters, session parameter check, user associated data and the like needing to be considered in a protection system can be reduced, and the security level of the system is raised.

Description

technical field [0001] The invention relates to the field of firewalls, in particular to an HTTP service firewall based on an adaptive proxy mechanism. Background technique [0002] In the field of firewalls, there are the earliest data link layer and network layer firewalls based on the OSI seven-layer architecture, which mainly control access rights to sources and destinations, and the latest application layer based on the OSI seven-layer architecture. Attack signatures are checked by application firewalls. Traditional firewalls mainly include the following common technical types: packet filtering firewall, circuit layer firewall, application layer proxy firewall, dynamic packet filtering firewall, and adaptive proxy firewall. [0003] Packet filtering firewall: refers to working at the network layer, checking each packet passing through based on the following information: IP source address and destination address, TCP / UDP source port number and destination port number, p...

AI Technical Summary

Problems solved by technology

[0012] Business firewall, this is a new concept, because each customer's business is quite different, it is difficult to form a standardized inspection rule, and because the concept of business firewall has just started in the past two years, the industry is not yet mature in this regard or typical product

Images