基于动态IP黑名单的轻量级WEB入侵主动防御关键技术与可视化度量模型研究与应用

Research on lightweight web intrusion active defense key technology and visual measurement model based on dynamic ip black list

针对现有被动检测防御方法的不足、商业产品费用昂贵、部署复杂等问题,研究一种简单快速的主动防御技术进行WEB动态实时主动防御,以解决面向WEB服务器的攻击防御难题。通过数据挖掘技术、规则库设计、威胁系数算法等技术实现。利用D3 WEB可视化技术实现监测度量WEB入侵情况。该技术最大限度降低了主动防御漏报和误报率,提高了防御效果和执行效率,保证了正常网络通信的质量。

In view of the existing passive detection and prevention methods and lack of commercial products are expensive and complex deployment problem of a simple and fast active defense technology of WEB dynamic real-time active defense, in order to solve the problem of attack and defense for WEB server. Technology, rule base design, algorithm of data mining based on threat coefficient. Using D3 WEB visualization technology to achieve the monitoring measure of WEB intrusion. The technology reduces the false alarm and false positive rate of active defense,improves the defense effect and execution efficiency, and ensures the quality of normal network communication.