CC attack protection method and device, storage medium and computer device

Abstract

The invention discloses a CC attack protection method and device, a storage medium and a computer device. The method comprises the steps of obtaining a request data packet generated by a target application to a target server; performing encryption processing on the request data packet according to a preset encryption rule; and sending the encrypted request data packet to a forwarding server to enable the forwarding server to forward the request data packet to the target server after performing security authentication on the request data packet. According to the invention, the request data packet is encrypted at a client side and the encrypted data packet is sent to the forwarding server, so that the encryption mode is used as a basis for security verification of the request data packet. The forwarding server is used for performing security authentication on the encrypted request data packet and then realizing the data forwarding, so that the security of the request data packet forwarded to the target server is ensured, and the working fault of the target server caused by the CC attack can be effectively prevented.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a CC attack protection method and device, storage medium, and computer equipment. Background technique [0002] With the rapid development of network technology and the rapid expansion of network scale, security holes in the network are increasingly exploited by attackers to attack hosts in the network. The popular CC (Challenge Collapsar) attack in recent years is a kind of network attack. [0003] CC attack belongs to a page-based distributed denial of service (DDOS, Distributed Denial of Service) attack. An attacker can usually continuously send request packets to the target server that consume the performance of the target server, causing the target server to continuously perform a large number of calculations or operations, consuming a lot of resources. When the calculation or operation performed by the target server reaches the processing limit of its o...

AI Technical Summary

Problems solved by technology

An attacker can usually continuously send request packets to the target server that consume the performance of the target server, causing the target server to continuously perform a large number of calculations or operations, consuming a lot of resources

When the calculation or operation performed by the target server reaches the processing limit of its own CPU, it will cause normal access to be terminated, or even downtime

[0004] The anti-CC attack method in the prior art usually only protects against large-traffic attacks. When faced with targeted CC attacks, there are often a large number of leaks, false seals, etc., and the customer experience is extremely bad. At the same time, a large number of anti-CC firewalls on the market have problems such as difficulty in client SDK integration and easy cracking.

Images