Method and system for detecting unauthorized access attack
AssigneeSangfor Technologies Company Limited
InventorXIN ZHOU
Life of this patent
Estimating the term…
Abstract
A method is provided for detecting unauthorized access attack. The detecting method includes obtaining at least one HTTP request and at least one URL address of the HTTP request by parsing the HTTP request; determining whether there exist one or more protection rules corresponding to the URL address; and, when it is determined that the protection rules corresponding to the URL address exit, obtaining access data of the HTTP request. The detecting method also includes determining whether the access data satisfies the protection rules; and, when it is determined that the access data does not satisfy the protection rules, determining the corresponding HTTP request of the URL address to be an unauthorized access attack.
Claims18
A method for detecting unauthorized access attack, comprising:
- obtaining at least one HTTP request and at least one URL address of the HTTP request by parsing the HTTP request;
- determining whether there exist one or more protection rules corresponding to the URL address;
- when it is determined that the protection rules corresponding to the URL address exit, obtaining access data of the HTTP request;
- determining whether the access data satisfies the protection rules;
- and
- when it is determined that the access data does not satisfy the protection rules, determining the corresponding HTTP request of the URL address to be an unauthorized access attack.
A related unauthorized access attack detecting system, comprising:
- an analyzing module configured to obtain at least one HTTP request and at least one URL address of the HTTP request by parsing the HTTP request;
- a first determining module configured to determine whether there exist one or more protection rules corresponding to the URL address;
- an obtaining module configured to, when the first determines that the protection rules corresponding to the URL address exit, obtain access data of the HTTP request;
- a second determining module configured to determine whether the access data satisfies the protection rules and, when the second determining module determines that does not satisfy the protection rules, determine the corresponding HTTP request of the URL address to be an unauthorized access attack.
Dependencies are inferred from the claim text.