基于RTBH的网站应急阻断平台设计与应用

Design and application of website emergency blocking platform based on RTBH

网站系统目前已成为政务、教育、企业等无法替代的业务门户,并成为最易受黑客攻击的目标之一。在网站发生网络安全紧急事件时,及时阻断网站的互联网连接以减少不良影响具有十分重要的意义。针对使用防火墙策略或构造伪报文拒绝访问请求等传统阻断方式存在配置复杂或效率低的缺点,提出一种基于BGP远程触发黑洞(RTBH)路由技术的网站应急阻断方案,并利用微信服务号实现了移动端的一键断网平台设计。在广东省教育和科研计算机网中进行部署和测试,结果表明,所设计的平台操作简单且可实现秒级断网。

The website system has become an irreplaceable service portal of government agencies,education institutions,enterprises and so on,which also has become one of the most attacked targets by hackers. In the event of network security emergencies,it is of great significance to timely block the Internet connection of websites to reduce the adverse effects. Due to the fact that the traditional blocking methods,such as using firewall policies or constructing fake messages to deny website access requests,have the disadvantages of complex configuration or low efficiency,a website emergency blocking scheme based on BGP Remotely-Triggered Black Hole(RTBH) routing technology was designed,and a one-key blocking platform was realized by combining with WeChat official accounts. Under being deployed in the CERNET of Guangdong,the test results show that the platform can disconnect the website from Internet in seconds.