Interface security control method in network security, and interface security control terminal device

Abstract

The invention is applicable to the technical field of network security, and provides an interface security control method in network security, and an interface security control terminal device. The method comprises the following steps: receiving an HTTP request sent by a client, and parsing the request to obtain a URI, and determining a corresponding security policy, wherein the security policy comprises one or more of signature verification, user authentication, replay verification and black list and white list verification; verifying the HTTP request according to the security policy; if theHTTP request passes the verification, determining a current limiting policy corresponding to the URI; verifying the HTTP request according to the current limiting policy; if the HTTP request passes the verification, determining a micro service interface corresponding to the URI, and forwarding the HTTP request to the micro service interface; and receiving a response returned by the micro service interface, and sending the response to the client. A public network request can be intercepted, verified and the like, unified control of the security of the micro service interface is achieved, and the direct interaction between an external network and the micro service interface is avoided to ensure the security of the micro service interface.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to an interface security control method and terminal equipment in network security. Background technique [0002] Microservice is an emerging software architecture that splits a large single application and service into dozens of supporting microservices. A microservices strategy can make life easier by scaling individual components rather than the entire application stack to meet service level agreements. Under the wave of microservices, businesses are split into fine-grained segments to ensure business modularity and availability. However, for applications after microservices, the number of interface services is large and scattered, and security problems are prone to occur. Then, the security of the interface exposed by each service to the external network is very important. Contents of the invention [0003] Embodiments of the present invention provide a...

AI Technical Summary

Problems solved by technology

However, after micro-service applications, the number of interface services is large and scattered, which is prone to security problems

Images