Web application security protection method and system based on dynamic domain name, and server

Abstract

The invention belongs to the field of internet security, and particularly relates to a web application security protection method and system based on a dynamic domain name, and a server. The system comprises: an application server, which is used for providing online service and allowing a client user who passes identity authentication to access, a proxy node, which consists of distributed computers and is used for proxy forwarding of data traffic between a client and a server by deploying proxy service software on the computers; an authentication server, which is used for performing identity authentication on a client user and distributing an effective proxy node to the user passing the authentication; a management server, which is used for detecting and collecting abnormal behaviors of the user and triggering the authentication server to dynamically distribute effective proxy nodes to the abnormal user again; and a multi-router, which is arranged around the application program server and is used for limiting inbound traffic by utilizing an effective proxy node list. Distributed denial of service attacks can be blocked, tenants are protected from normally accessing the web server, and external DDos attacks and internal attacks are effectively resisted.

Description

technical field [0001] The invention belongs to the field of Internet security, and in particular relates to a dynamic domain name-based web application security protection method, system and server. Background technique [0002] With the development of the Internet, daily life is inseparable from web applications, such as Taobao, 12306 ticket buying, remote office, etc. A survey by Symantec, a well-known international manufacturer, shows that 90% of the loopholes in the world are Web loopholes. Web application security has become the biggest security risk at present. Mainstream attacks such as SQL injection, cross-site scripting, domain name hijacking, and DDoS are mainly aimed at web systems, and the current static configuration of web applications makes them vulnerable to attacks. At present, there have been some researches on the DDoS attack defense of Web systems at home and abroad, such as: based on IP address filtering technology, this technology analyzes the traffic...

AI Technical Summary

Problems solved by technology

However, the above-mentioned web system protection scheme needs to modify the existing network and / or deployed information system, increasing the cost of development and deployment

Images