Safety protection method and device based on web white list, equipment and storage medium

The invention discloses a security protection method and device based on a web white list, equipment and a storage medium, and the method comprises the steps: collecting the information of a pluralityof URL links; constructing a link white list according to the information of the plurality of URL li...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: LIU FENGZHENG, CHEN SHOUMING, SHANG YANWEI, QIAN YANG, QIU SHI, YU SHUNHUAI, LIANG YUNDE, LI XUEWU, LU YANQIAN, XU MENG
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention discloses a security protection method and device based on a web white list, equipment and a storage medium, and the method comprises the steps: collecting the information of a pluralityof URL links; constructing a link white list according to the information of the plurality of URL links and storing the link white list; when an access request is received, analyzing and obtaining arequest parameter carried by the access request; comparing a request parameter carried by the access request with a link white list to judge whether the access request meets a preset triggering condition or not; and when the access request meets a preset triggering condition, executing a preset protection strategy. The method has the advantages that URL collection and safety equipment import are simple and easy to implement. And on the other hand, through a rule strategy of the security device, absolute path file uploading and access can be effectively eradicated, and path sniffing or directory sniffing behaviors are p