Self-adaptive anti-attack method and device

The invention discloses a self-adaptive anti-attack method and device. The self-adaptive anti-attack method comprises the steps of matching nodes passed by a message received from a port in a network element system according to time order with a node passed through by a second message of which the business type is the same as that of the message, thus acquiring matching degree of a path, wherein the second message passes the network element system for the first time; determining whether the received message is an abnormal message or not according to the matching degree, reducing the allowed access flow of the port from which the message is received if the message is the abnormal message, so as to realize the self-adaptive anti-attack to the abnormal message, thereby eliminating the trouble operation step of firewall artificial configuration, and effectively improving the dynamic identification and intercept effects on network attack.