Method for coping with WebShell upload attack based on operation and maintenance management

• Main Authors: CAI KAIWEI, YE DEWANG, WANG MULIAO, LIN YONG
• Format: Patent
• Language: Chinese; English
• Published: 14.07.2023
• Subjects: CALCULATING; COMPUTER SYSTEMS BASED ON SPECIFIC COMPUTATIONAL MODELS; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention discloses a WebShell uploading attack coping method based on operation and maintenance management, and relates to the technical field of network security, and the method comprises the steps: data packet collection: an operation and maintenance management server carries out the real-time capturing of a data packet generated in a subordinate server; data arrangement: the operation and maintenance management server analyzes the data packets to obtain network features of the data packets; attack verification: the operation and maintenance management server matches the analysis result with feature elements in a preset attack feature library, when matching succeeds, the current data packet is identified as an attack behavior, and otherwise, the operation authority of the current data is opened; and attack response: the operation and maintenance management server stores the data packet cluster marked with the attack behavior into a learner, and the learner is used for carrying out deep learning based o