| 摘要 |
<p>A method and system for real-time blocking of malicious requests to a computer system and removal of malicious code from such requests, by comparing request information to a database of known malicious requests. If it is determined that the request is from an IP address that is restricted or has previously attacked another system, the request may be denied. If the request is not denied, it will be parsed and searched for inclusion of remote files, database code, programming code, known hacking terms, and user-supplied terms. If the presence of any of these items is detected, the request may be denied. Denied request information will be logged, reported to the user and also SecurePlus if the user has subscribed to SecurePlus. If the request in question has been denied, a cookie will be inserted onto the requesting system to assist in detection of known attackers.</p> |
