Method for preventing network attack performed by using legal data or tampering legal data

Abstract

The invention discloses a method for preventing a network attack performed by using legal data or tampering the legal data. A timestamp, an unrepeated random number and an appointed salt value are added into requested service data, a hash algorithm is performed on the above data to acquire a hash value, and a service terminal uploads both the above data and the service data to a server while accessing a cloud; a cloud signature verification module verifies whether the timestamp and the hash value accord with signature verification, if yes, the access data, and the timestamp, unrepeated randomnumber and salt value, appointed by the cloud and the terminal, uploaded by the service terminal are subjected to the hash algorithm to acquire the hash value, and then the acquired hash value is compared with the hash value uploaded by the service terminal, if the two hash values are consistent, the verification is passed, the subsequent work can be performed, and the hash value uploaded by the service terminal in this time is cached for being compared with the hash value accessed latterly, and if the above two hash values are inconsistent, a service request is rejected. According to the method provided by the invention, the situation that the normal access is affected due to the fact that the server resources are illegally occupied can be avoided, and thus the purpose of protecting network and server resources is achieved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for preventing network attacks by using legal data or tampering with legal data. Background technique [0002] With the increase of Internet applications, servers serving Internet applications are often attacked by network attackers. Among them, network attackers intercept request data, use legal data or tamper with legal data to make a large number of repeated requests to the server, so as to occupy server and network resources and affect normal business access, which is a very common attack method. The attack method is simple and easy to distribute. It is necessary to adopt an efficient and easy-to-implement method to defend against such attacks. [0003] The hash algorithm is a secure hash algorithm certified by FIPS, which can calculate a fixed-length string (also known as a message digest) corresponding to a digital message. If the input messages are diff...

AI Technical Summary

Problems solved by technology

The reason why these algorithms are called "safe" is based on the following two points (according to the description of the official standard): 1. It is very difficult to deduce the original input message from the message summary in terms of calculation theory.

2. It is also very difficult to find two sets of different messages corresponding to the same message summary from a computational theory point of view.

Images