| 摘要 |
A method for protecting a Web application running on a first local Web Server from hacker attacks, said Web Server being connectable to at least one client, the method comprising the following steps: - providing a plurality of preset rules on said Server, which correspond to specific characteristics of HTTP requests; - receiving an HTTP request on said server from the client, said HTTP request comprising a plurality of characteristics; - analyzing said characteristcs of said received HTTP request in accordance with said rules provided on said server; - rejecting said HTTP request, if said rules identify said HTTP request as harmful request; - accepting said HTTP request, if said rules identify said HTTP request as trustable request; - classifying said HTTP request as doubtful request, if said rules identify said request neither as harmful request nor as trustable request; - evaluating the characteristics of said doubtful request; - generating a learned rule on basis of the evaluation. |
