Security protection method, apparatus and device, WAF and readable storage medium

The invention discloses a security protection method. The method comprises the following steps: when it is monitored an access request does not hit an IP list in a first WAF policy, executing a merging operation on regular expressions according to Boolean attribute parameters of the regular expressions in the first WAF policy, in order to obtain a first merged regular expression and a second merged regular expression; judging whether the access request hits the first merged regular expression or the second merged regular expression; if so, matching the access request with the regular expressions to determine a first verification result of the access request, or otherwise, determining that the first verification result of the access request is normal. The invention further discloses a security protection apparatus and device, a web application protection system WAF and a computer readable storage medium. By adoption of the security protection method disclosed by the invention, the verification efficiency of th