PROTECTION METHOD AND DEVICE AGAINST ATTACKS

摘要

The present invention provides an attack defense method and device. The method includes: counting the number of renegotiations in a transmission control protocol TCP connection, where the number of the renegotiations is the number of repeated negotiations between a client and a server in the TCP connection; when the number of the renegotiations in the TCP connection is greater than a preset threshold of the number of renegotiations, determining that the TCP connection is an abnormal connection; and disconnecting the TCP connection. Embodiments of the present invention also provide an attack defense device, implementing effective defense against an SSL DOS attack behavior.