Network attack defending system and method for defending network attacks

Abstract

The invention discloses a network attack defending system and a method for defending network attacks. The system comprises an application layer load balancing subsystem, a message queue subsystem and a real-time computing subsystem; the application layer load balancing subsystem is configured to receive a user request and contains a load balancing agent, and the load balancing agent is configured to read the user request from the application layer load balancing subsystem and write the user request into the message queue subsystem; the message queue subsystem is configured to cache the user request written by the load balancing agent; and the real-time computing subsystem is configured to acquire the cached user request from the message queue subsystem, analyze data in the user request, generate a banning rule according to an analysis result and write the banning rule into the message queue subsystem; and specifically, the message queue subsystem is further configured to cache the banning rule, and the load balancing agent is further configured to acquire the cached banning rule from the message queue subsystem and apply the extracted banning rule to the application layer load balancing subsystem.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network attack defense system and a method for defending network attacks through the network attack defense system. Background technique [0002] With the rapid development of the Internet, network security has become an increasingly significant problem. Hackers have caused many companies to pay a heavy price through stealing data or retaliating attacks. For a typical Internet company, the network is an extremely important basic setting, which has extremely high requirements for network security. This requires that when a network security attack occurs, it must be detected within a certain period of time. [0003] The detection of network attacks is mainly divided into the detection of the transport layer and the detection of the application layer. The hardware firewalls commonly used today are more suitable for the attack defense of the transport layer, and most of the intercep...

AI Technical Summary

Problems solved by technology

[0003] The detection of network attacks is mainly divided into the detection of the transport layer and the detection of the application layer. The hardware firewalls commonly used today are more suitable for the attack defense of the transport layer, and most of the interception rules are based on the initial settings of the manufacturer. Or the simple setting of the management interface, so it cannot achieve flexible logical judgment for the application layer

[0004] In addition, although the hardware firewall itself has the advantage of hardware acceleration, its processing power still has a bottleneck for large computer rooms.

Images