Method, device and system for preventing malicious requests for server

Abstract

The invention relates to a method, device and system for preventing malicious requests for a server. The method includes the following steps that: first verification is performed on a received first network request, and verification results of the first verification and a generated session token are returned to the cookie of a user end which transmits the first network request; and second verification is performed on the verification results, the session token and the like which are carried by a received second first network request, if verification is successful, a response is made to the second first network request, so that corresponding service data processing can be performed, otherwise, the second first network is intercepted. According to the method, device and system for preventing malicious requests for the server of the invention, a blacklist user data table is updated in real time in a malicious request verification process, and users who send malicious requests are marked as blacklist users; and service processing is performed on the network request (the second network request) which is transmitted by a user based on the session token obtained by the user; and therefore, the rate of misjudgment and the rate of missed judgment can be effectively decreased, and the accuracy of malicious request judgment can be improved.

Description

technical field [0001] The present application relates to the technical field of the Internet, and more specifically relates to a method, device and system for preventing malicious requests to servers. Background technique [0002] With the rapid development of the Internet, malicious behavior on the Internet has become a problem that cannot be ignored in the industry. Malicious network behaviors can be abnormal means adopted to achieve a certain purpose, such as network attacks, malicious requests, etc. In the network environment, malicious behaviors on the network can cause the website to fail to provide services to users normally in a very short period of time, which seriously affects the normal operation of the Internet. [0003] Malicious requests can be hypertext transfer protocol (http) network requests that are continuously sent to the server through the application program within a period of time and affect the normal operation of the server. For example, to inter...

AI Technical Summary

Problems solved by technology

[0011] The main purpose of this application is to provide a method, device and system for preventing malicious requests to the server, so as to solve the problems in the prior art that the method for judging malicious requests on the network has low accuracy, high misjudgment rate and missed judgment rate

Images