CN108965158A - A kind of cybersquatting current-limiting method, apparatus and system - Google Patents

A kind of cybersquatting current-limiting method, apparatus and system Download PDF

Info

Publication number
CN108965158A
CN108965158A CN201710347848.5A CN201710347848A CN108965158A CN 108965158 A CN108965158 A CN 108965158A CN 201710347848 A CN201710347848 A CN 201710347848A CN 108965158 A CN108965158 A CN 108965158A
Authority
CN
China
Prior art keywords
register
current
rush
module
cybersquatting
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201710347848.5A
Other languages
Chinese (zh)
Inventor
高雷
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
INTERNET DOMAIN NAME SYSTEM BEIJING ENGINEERING RESEARCH CENTER LLC
Original Assignee
INTERNET DOMAIN NAME SYSTEM BEIJING ENGINEERING RESEARCH CENTER LLC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by INTERNET DOMAIN NAME SYSTEM BEIJING ENGINEERING RESEARCH CENTER LLC filed Critical INTERNET DOMAIN NAME SYSTEM BEIJING ENGINEERING RESEARCH CENTER LLC
Priority to CN201710347848.5A priority Critical patent/CN108965158A/en
Publication of CN108965158A publication Critical patent/CN108965158A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/24Traffic characterised by specific attributes, e.g. priority or QoS
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/45Network directories; Name-to-address mapping
    • H04L61/4505Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
    • H04L61/4511Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a kind of cybersquatting current-limiting methods, apparatus and system, belong to communication current limiting technique field.This method is M seconds by setting time window and rush-register transaction threshold per second is N, and in M seconds, record start rush-register is counted as 0;The trading instruction for issuing cybersquatting, when receiving current transaction return code, the value of counter is that the current value n counted that rushes to register adds 1;Judge n+1 and the relative size per second for rushing to register transaction threshold N;It when n+1 is greater than N, disconnects, rushes to register transaction and terminate, rush to register flow to reduce, ensure registration service quality, and trading normal registration without influence, need not also increase hardware and software cost.

Description

A kind of cybersquatting current-limiting method, apparatus and system
Technical field
The present invention relates to the communications field, in particular to a kind of cybersquatting current-limiting method, apparatus and system.
Background technique
Registrar is the domain name to go offline in particular point in time rush-register, can pass through high-volume before and after the domain name goes offline time point It is intensive to send registering transaction packet to achieve the purpose that cybersquatting.Good domain name will cause a large amount of registrars same period and fight for, The rush-register transaction packet quantity that each registrar is sent is again very huge, if do not guided properly and limiting, will cause domain name note Service pressure is excessive for volume, load too high or even service response time increase even result in delay machine.
Network traffic data when cybersquatting increases sharply, cause the phenomenon that network congestion have become restrict network Development and One bottleneck of application, the load that terminal user is supplied to network are greater than Internet resources capacity (buffering, link bandwidth etc.) and locate Reason ability shows as packet delay increase, drop probability increase, the decline of upper layer application system performance, so urgently needing net The research and development and application of network flow limiting technology.
For guarantee registration service stability and availability, generally there is following technological means to control cybersquatting:
Flow control: setting transaction packet flow threshold per second is then attached more than threshold value and freezes or abandon connection.It should The defect of technological means is can not effectively to distinguish malice to rush to register flow and normal registration transaction flow, so that arm's length dealing also can be because Flow restriction and slow down, to business promotion scene it is unfavorable.
Transaction delay process: according to answer code of trading is rushed to register, specific aim delay process is carried out.Due to cybersquatting transaction Feature, is that magnanimity transaction packet rushes to register same domain name, so the answer code that most of transaction packets obtain all will be 2302 (to represent domain Name object is existing).As long as receiving transaction packet answer code is 2302, server-side does the delay response of transmission in N seconds to current connection The processing of packet.The defect of the technological means is, since delay causes server-side throughput degradation, while reducing flow, also to give Normal registering transaction brings processing capacity decline.
It is independent to rush to register service: establishing independent rush-register interface service, and normal registration business service address separates.The skill Art means have ensured that the service quality of normal registration service is not influenced by rush-register really, but increase platform hardware and software cost.Together When to network flow, the occupancy of bandwidth, there is no corresponding declines.
Summary of the invention
In order to solve current limiting technique in the prior art will affect normal registration business or must increase platform software and hardware at This problem of, the embodiment of the invention provides a kind of cybersquatting current-limiting methods.The technical solution is as follows:
In a first aspect, domain name rush-register current-limiting method includes:
S1: the setting initial count time is T0, setting starting, which is rushed to register, is counted as 0;
S2: acquisition current count time TtN is counted with current rush to register of acquisition;
S3: compare current count time TtWith initial count time T0Difference DELTA T (Tt-T0) with time window preset value M's Relative size;When Δ T is more than or equal to M, step S4 is executed;When Δ T is less than M, step S5 is executed;
S4: initial count time when setting records again is Tt, starting rush-register when recording again is set and is counted as 0, Execute step S2;
S5: receiving current transaction return code, and the value of counter, which is recorded as currently rushing to register, counts n cumulative 1;
S6: current rush to register of judgement counts aggregate-value n+1 and the relative size per second for rushing to register transaction threshold N;Be greater than as n+1 or When person is equal to N, step S7 is executed;When n+1 is less than N, rush-register is traded successfully, executes step S2 again;
S7: disconnecting present flow rate connection, rushes to register transaction and terminates, and instruction client re-establishes connection.
With reference to first aspect, in the first possible implementation, the step S1 includes:
According to client identification, the initial count time that active client is arranged is T0, the starting of active client is set Rush-register is counted as 0;
The client identification includes at least one in the physical address and user name of client.
The possible implementation of with reference to first aspect the first, in the second possible implementation, the method Further include:
According to preset rules, time window preset value M is set;
The preset rules include:
Time window preset value M when registering transaction packet high-volume is intensively sent is shorter than M value when registering transaction packet is sent on a small quantity.
Second aspect, the invention also discloses a kind of cybersquatting current-limiting apparatus, described device includes:
Timer is T for the initial count time to be arranged0With record current count time Tt
Counter is rushed to register for setting starting and is counted as 0 and records currently to rush to register to count n;
Acquisition module, for acquiring current count time TtN is counted with current rush to register;
Comparison module, for comparing current count time TtWith initial count time T0Difference DELTA T (Tt-T0) and the time The relative size of window preset value M;
Accumulator module, for receiving current transaction return code, the value of counter is that current rush to register counts n cumulative 1;
Judgment module counts aggregate-value n+1 and the relative size per second for rushing to register transaction threshold N for judging currently to rush to register;
Determining module is connected, for disconnecting or connecting flow.
With reference to first aspect, in the first possible implementation, described device further includes flow monitoring module;It is described Flow monitoring module is for monitoring real-time traffic, the flow monitoring module and the judgment module and the connection determining module It is connected.
The possible implementation of with reference to first aspect the first, in the second possible implementation, the acquisition Module is connected with the timer and the counter, the current count time T of the acquisition module acquisitiontMeter is rushed to register with current Number n is respectively by the counter and timer record.
With reference to first aspect the first can or second of possible implementation in, in the third possible implementation In, the timer is connected with the comparison module, and the comparison module is connected with the accumulator module, the accumulator module with The counter is connected;The comparison module receives the current count time T of timer transmissiontWith initial count time T0's Information compares difference DELTA T (Tt-T0) receive current transaction with the relative size of time window preset value M and return when Δ T is less than M When code, triggering information is sent to accumulator module, and counter, which is currently rushed to register, counts n cumulative 1;When Δ T is greater than or equal to M, setting weight Initial count time when new record is Tt, starting rush-register when recording again is set and is counted as 0.
Further, the counter is connected with the judgment module, the judgment module and the connection determining module It is connected;The judgment module judges that current rush to register counts aggregate-value n+1 and rush-registers per second transaction after receiving the result of counter The relative size of threshold value N, judging result are sent to the connection determining module, and instruction client disconnects or connection flow.
The third aspect, invention additionally discloses a kind of cybersquatting current limiting systems, including above-mentioned apparatus and server;
The server, for receiving and sending computer instruction;The server and the timer, counter, ratio It is connected compared with module, accumulator module, judgment module with connection determining module.
In conjunction with the third aspect, in the first possible implementation, the calculating that the server receives and sends Machine instruction includes rushing to register trading instruction, riming instructions, counting instruction, compare instruction, accumulated instruction, decision instruction and disconnect Instruction.
Technical solution provided in an embodiment of the present invention has the benefit that through limited current algorithm in rushing to register transaction Using 1) it reduces and rushes to register flow, ensure registration service quality;2) it trades normal registration without influence;3) software and hardware need not be increased Cost.
Detailed description of the invention
To describe the technical solutions in the embodiments of the present invention more clearly, make required in being described below to embodiment Attached drawing is briefly described, it should be apparent that, drawings in the following description are only some embodiments of the invention, for For those of ordinary skill in the art, without creative efforts, it can also be obtained according to these attached drawings other Attached drawing.
Fig. 1 is a kind of cybersquatting current-limiting method flow chart provided in an embodiment of the present invention;
Fig. 2 is a kind of cybersquatting current-limiting apparatus structural schematic diagram provided in an embodiment of the present invention;
Fig. 3 is a kind of cybersquatting current limiting system structural schematic diagram provided in an embodiment of the present invention.
Specific embodiment
To make the object, technical solutions and advantages of the present invention clearer, below in conjunction with attached in the embodiment of the present invention Figure, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is only this Invention a part of the embodiment, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art exist Every other embodiment obtained under the premise of creative work is not made, shall fall within the protection scope of the present invention.
Embodiment 1
The embodiment of the invention discloses a kind of cybersquatting current-limiting methods, as shown in Figure 1, which comprises
S1: the setting initial count time is T0, setting starting, which is rushed to register, is counted as 0.
Specifically, the initial count time that active client is arranged is T according to client identification0, active client is set Starting rush-register be counted as 0;
The client identification includes at least one in the physical address and user name of client.
S2: acquisition current count time TtN is counted with current rush to register of acquisition;
S3: compare current count time TtWith initial count time T0Difference DELTA T (Tt-T0) with time window preset value M's Relative size;When Δ T is more than or equal to M, step S4 is executed;When Δ T is less than M, step S5 is executed;
S4: initial count time when setting records again is Tt, starting rush-register when recording again is set and is counted as 0, Execute step S2;
S5: receiving current transaction return code, and the value of counter, which is recorded as currently rushing to register, counts n cumulative 1;
S6: current rush to register of judgement counts aggregate-value n+1 and the relative size per second for rushing to register transaction threshold N;Be greater than as n+1 or When person is equal to N, step S7 is executed;When n+1 is less than N, rush-register is traded successfully, executes step S2 again;
S7: disconnecting present flow rate connection, rushes to register transaction and terminates, and instruction client re-establishes connection.
Before the step S3, the method also includes:
According to preset rules, time window preset value M is set;
The preset rules include:
Time window preset value M when registering transaction packet high-volume is intensively sent is shorter than M value when registering transaction packet is sent on a small quantity.
Technical solution provided in an embodiment of the present invention has the benefit that through limited current algorithm in rushing to register transaction Using, it reduces and rushes to register flow, guarantee registration service quality;Simultaneously trade normal registration without influence;Also it need not increase software and hardware Cost.
Embodiment 2
The embodiment of the invention discloses a kind of cybersquatting current-limiting methods, comprising the following steps:
S1: the setting initial count time is T0, setting starting, which is rushed to register, is counted as 0;
Specifically, according to client identification, the initial count time that active client is arranged is T0.The process can be with are as follows:
Timer corresponding with the client identification is set, and the initial count time that timer is arranged is T0
According to client identification, the starting rush-register that active client is arranged is counted as 0.The process can be with are as follows:
Counter corresponding with the client identification is set, and the starting rush-register that counter is arranged is counted as 0.
Wherein, above-mentioned setting T0The process rushed to register and counted is originated with setting can be and carry out simultaneously, be also possible to distinguish It carries out, the embodiment of the present invention is not limited specific execution sequence.
The client identification includes the physical address and user name of client.
S2: acquisition current count time TtN is counted with current rush to register of acquisition;
Wherein, current count time T is calculatedtWith initial count time T0Difference;
Record ends to current count time TtShi Dangqian, which is rushed to register, counts n;
Further, the method also includes:
According to preset rules, time window preset value M is set;
The preset rules include:
Time window preset value M when registering transaction packet high-volume is intensively sent is shorter than M value when registering transaction packet is sent on a small quantity.
Wherein, time window preset value M is the effective time threshold value being not zero, and the period for counting acquisition is divided into centainly The time interval of duration carries out current count acquisition in finite time section and controls flow to a certain extent, plays current limliting Effect, ensure registration service quality.
Wherein, for the length of time window preset value M according to how much flexible settings of the amount of registering transaction packet, registering transaction packet is big Time window preset value M when batch is intensively sent is shorter than M value when registering transaction packet is sent on a small quantity.It just can ensure that and handed in registration in this way Easily packet high-volume is intensive when sending, that is, and flow is when surging, by the time zone that the period for counting acquisition is divided to shorter duration Between, so that the absolute value of flow is controlled.
S3: compare current count time TtWith initial count time T0Difference DELTA T (Tt-T0) with time window preset value M's Relative size;When Δ T is more than or equal to M, step S4 is executed;When Δ T is less than M, step S5 is executed.
Specifically, the embodiment of the present invention is not limited specific manner of comparison.
By by current count time TtWith initial count time T0Difference DELTA T and setting time window preset value M counted The comparison of value;Wherein, time window preset value M is the effective time threshold value being not zero, and the period for counting acquisition is divided into one The long time interval of timing carries out current count acquisition in finite time section and controls flow to a certain extent, plays limit The effect of stream ensures registration service quality.It is embodied in and works as Δ T within this period of M, with regard to stored counts, pushed away when the time It moves, Δ T is just disconnected beyond this period of M, and dividing from the period ensure that current limliting.
S4: initial count time when setting records again is Tt, starting rush-register when recording again is set and is counted as 0, Execute step S2;
Specifically, according to client identification, initial count time when setting records again is Tt, when setting records again Starting rush-register be counted as 0;
The client identification also includes the physical address and user name of client.
Execute step S2 again: i.e. acquisition current count time and acquisition current rush to register counts n;
Wherein, current count time and initial count time T0Difference must be greater than 0, carry out within a certain period of time current Rush to register the effective acquisition for counting n.
S5: receiving current transaction return code, and the value of counter, which is recorded as currently rushing to register, counts n cumulative 1;
It currently trades successfully specifically, receiving current transaction return code instruction, counter cumulative record is successfully secondary Number.
Wherein, rush-register transaction threshold N per second is as another grade current limiting measures, by limit the aggregate-value of counter without departing from The rush-register of the unit time that system can bear is traded the upper limit, it is ensured that transaction carry out flow in the period maintain certain level with Under, once exceeding, transaction is terminated.
S6: current rush to register of judgement counts aggregate-value n+1 and the relative size per second for rushing to register transaction threshold N;Be greater than as n+1 or When person is equal to N, step S7 is executed;When n+1 is less than N, rush-register is traded successfully, executes step S2 again;
Specifically, the embodiment of the present invention is not limited specific judgment mode.
Rush-register transaction threshold N per second is as the another grade current limiting measures after preset time period M value, by limiting counter The rush-register transaction upper limit of the aggregate-value without departing from the unit time that system can bear, it is ensured that transaction carries out flow in the period and maintains In certain level hereinafter, once exceeding, present flow rate connection is disconnected, transaction terminates;If could not exceed, recycles and execute acquisition Current count time TtN is counted with current rush to register of acquisition, then is compared time window preset value M and rush-register more per second transaction threshold The current limiting measures of value N reduce so that flow is controlled and rush to register flow, ensure registration service quality.
S7: disconnecting present flow rate connection, rushes to register transaction and terminates, and instruction client re-establishes connection.
Technical solution provided in an embodiment of the present invention has the benefit that this domain name current-limiting method by this current limliting Algorithm is applied in rush-register is traded, and is reduced and is rushed to register flow and guarantee registration service quality, while trading normal registration without influence, Also service is rushed to register not necessarily like independent foundation additionally increase hardware and software cost like that.
Embodiment 3
The embodiment of the invention also discloses a kind of cybersquatting current-limiting apparatus, and referring to shown in Fig. 2, described device includes:
Timer 21 is T for the initial count time to be arranged0With record current count time Tt
Counter 22 is rushed to register for setting starting and is counted as 0 and records currently to rush to register to count n;
Acquisition module 23, for acquiring current count time TtN is counted with current rush to register;
Comparison module 24, for comparing current count time TtWith initial count time T0Difference DELTA T (Tt-T0) and when Between window preset value M relative size;Time window preset value M is the effective time threshold value being not zero, and will count the period of acquisition It is divided into the time interval of certain time length, current count acquisition is carried out in finite time section and controls flow to a certain extent, The effect of current limliting is played, ensures registration service quality.
Accumulator module 25, for receiving current transaction return code, the value of counter is that current rush to register counts n cumulative 1;Tool Body shows as working as Δ T within this period of M, and is successfully indicated using receiving transaction return code as transaction, then accumulative meter Number;It is elapsed when the time, Δ T is just disconnected beyond this period of M, and the record start time is accumulated again with counting is emptied again Record, dividing from the period ensure that current limliting.
Judgment module 26 counts the relatively large of aggregate-value n+1 and rush-register transaction threshold N per second for judging currently to rush to register It is small;Rush-register transaction threshold N per second is as the another grade current limiting measures after preset time period M value, by limiting the accumulative of counter The rush-register transaction upper limit of the value without departing from the unit time that system can bear, it is ensured that transaction carries out flow in the period and maintains one It is fixed below horizontal, it reduces and rushes to register flow, ensure registration service quality.
Determining module 27 is connected, for disconnecting or connecting flow.
Further, described device further includes flow monitoring module 28;The flow monitoring module 28 is for monitoring in real time Flow, the flow monitoring module 28 are connected with the judgment module 26 and the connection determining module 27.
Specifically, the acquisition module 23 is connected with the timer 21 and the counter 22, the acquisition module 23 The current count time T of acquisitiontIt is recorded respectively by the counter 22 and timer 21 with the current counting n that rushes to register.
Wherein, the timer 21 is connected with the comparison module 24, the comparison module 24 and the accumulator module 25 It is connected, the accumulator module 25 is connected with the counter 22;The comparison module 24 receives the current of the transmission of timer 21 Gate time TtWith initial count time T0Information, compare difference DELTA T (Tt-T0) with the relative size of time window preset value M, When Δ T is less than M, receives current transaction return code, triggering information is sent to accumulator module 25, counter 22 currently rushes to register meter Number n cumulative 1;The initial count time when Δ T is greater than or equal to M, and setting records again is Tt, rising when setting records again Begin to rush to register and is counted as 0.
Further, the counter 22 is connected with the judgment module 26, and the judgment module 26 and the connection are true Cover half block 27 is connected;The judgment module 26 receive judge after the result of counter 22 it is current rush to register count aggregate-value n+1 with The relative size per second for rushing to register transaction threshold N, judging result are sent to the connection determining module 27, the disconnection of instruction client or Connect flow.
Technical solution provided in an embodiment of the present invention has the benefit that this cybersquatting current-limiting apparatus can drop Low rush-register flow and guarantee registration service quality, while trading normal registration without influence, it also rushes to register and takes not necessarily like independent foundation Business additionally increases hardware and software cost like that.
Embodiment 4
Invention additionally discloses a kind of cybersquatting current limiting systems, and referring to shown in Fig. 3, which includes above-mentioned apparatus and service Device;
Timing device 31 is T for the initial count time to be arranged0With record current count time Tt
Counting equipment 32 is rushed to register for setting starting and is counted as 0 and records currently to rush to register to count n;
Equipment 33 is acquired, for acquiring current count time TtN is counted with current rush to register;
Compare equipment 34, for comparing current count time TtWith initial count time T0Difference DELTA T (Tt-T0) and when Between window preset value M relative size;Time window preset value M is the effective time threshold value being not zero, and will count the period of acquisition It is divided into the time interval of certain time length, current count acquisition is carried out in finite time section and controls flow to a certain extent, The effect of current limliting is played, ensures registration service quality.
Accumulative device 35, for receiving current transaction return code, the value of counter is that current rush to register counts n cumulative 1;Tool Body shows as working as Δ T within this period of M, and is successfully indicated using receiving transaction return code as transaction, then accumulative meter Number;It is elapsed when the time, Δ T is just disconnected beyond this period of M, and the record start time is accumulated again with counting is emptied again Record, dividing from the period ensure that current limliting.
Judge equipment 36, counts the relatively large of aggregate-value n+1 and rush-register transaction threshold N per second for judging currently to rush to register It is small;Rush-register transaction threshold N per second is as the another grade current limiting measures after preset time period M value, by limiting the accumulative of counter The rush-register transaction upper limit of the value without departing from the unit time that system can bear, it is ensured that transaction carries out flow in the period and maintains one It is fixed below horizontal, it reduces and rushes to register flow, ensure registration service quality.
It connects and determines equipment 37, for disconnecting or connecting flow.
Further, the system also includes flow monitoring equipment 38;The flow monitoring equipment 38 is for monitoring in real time Flow, the flow monitoring equipment 38 determine that equipment 37 is connected with the judgement equipment 36 and the connection.
Specifically, the acquisition equipment 33 is connected with the timing device 31 and 32 device of the counting equipment, the acquisition The current count time T that equipment 33 acquirestRemembered respectively by the counting equipment 32 and timing device 31 with the current counting n that rushes to register Record.
Wherein, the timing device 31 equipment 34 compared with described is connected, relatively equipment 34 and the accumulative device 35 are connected, and the accumulative device 35 is connected with the counting equipment 32;The relatively equipment 34 receives the transmission of timing device 31 Current count time TtWith initial count time T0Information, compare difference DELTA T (Tt-T0) opposite with time window preset value M Size sends triggering information to accumulative device 35, counting equipment 32 is worked as when Δ T is less than M, receives current transaction return code Preceding rush-register counts n cumulative 1;The initial count time when Δ T is greater than or equal to M, and setting records again is Tt, it is arranged and remembers again Starting rush-register when record is counted as 0.
Further, the counting equipment 32 is connected with the judgement equipment 36, the judgement equipment 36 and the connection Determine that equipment 37 is connected;The judgement equipment 36 judges that current rush to register counts aggregate-value n+ after receiving the result of counting equipment 32 1 is sent to the connection and determines that equipment 37, instruction client are disconnected with the relative size per second for rushing to register transaction threshold N, judging result Open or connect flow.
The server 39, for receiving and sending computer instruction;The server 39 and the timing device 31, meter Number equipment 32, compares equipment 34, accumulative device 35, judges equipment 36 acquisition equipment 33, determines that equipment 37 is connected with connecting.
Preferably, the computer instruction that the server 39 receives and sends refers to including rush-register trading instruction, timing It enables, count instruction, acquisition instructions, compare instruction, accumulated instruction, decision instruction and disconnect instruction.
Technical solution provided in an embodiment of the present invention has the benefit that through limited current algorithm in rushing to register transaction Using 1) it reduces and rushes to register flow, ensure registration service quality;2) it trades normal registration without influence;3) software and hardware need not be increased Cost.
All the above alternatives can form alternative embodiment of the invention using any combination, herein no longer It repeats one by one.
It should be understood that the apparatus and system provided by the above embodiment to cybersquatting current limliting is limited to cybersquatting When stream, only the example of the division of the above functional modules, in practical application, it can according to need and by above-mentioned function Distribution is completed by different functional modules, i.e., the internal structure of equipment or system is divided into different functional modules, to complete All or part of function described above.In addition, the equipment and system provided by the above embodiment to cybersquatting current limliting with Same design is belonged to the embodiment of the method for cybersquatting current limliting, specific implementation process can also be according to the correlation of embodiment of the method Step, which is not described herein again.
Those of ordinary skill in the art will appreciate that realizing that all or part of the steps of above-described embodiment can pass through hardware It completes, relevant hardware can also be instructed to complete by program, the program can store in a kind of computer-readable In storage medium, storage medium mentioned above can be read-only memory, disk or CD etc..
The foregoing is merely presently preferred embodiments of the present invention, is not intended to limit the invention, it is all in spirit of the invention and Within principle, any modification, equivalent replacement, improvement and so on be should all be included in the protection scope of the present invention.

Claims (10)

1. a kind of cybersquatting current-limiting method, which is characterized in that the described method includes:
S1: the setting initial count time is T0, setting starting, which is rushed to register, is counted as 0;
S2: acquisition current count time TtN is counted with current rush to register of acquisition;
S3: compare current count time TtWith initial count time T0Difference DELTA T (Tt-T0) opposite with time window preset value M Size;When Δ T is more than or equal to M, step S4 is executed;When Δ T is less than M, step S5 is executed;
S4: initial count time when setting records again is Tt, starting rush-register when recording again is set and is counted as 0, executes step Rapid S2;
S5: receiving current transaction return code, and the value of counter, which is recorded as currently rushing to register, counts n cumulative 1;
S6: current rush to register of judgement counts aggregate-value n+1 and the relative size per second for rushing to register transaction threshold N;When n+1 is greater than or waits When N, step S7 is executed;When n+1 is less than N, rush-register is traded successfully, executes step S2 again;
S7: disconnecting present flow rate connection, rushes to register transaction and terminates, and instruction client re-establishes connection.
2. a kind of cybersquatting current-limiting method according to claim 1, which is characterized in that the step S1 includes:
According to client identification, the initial count time that active client is arranged is T0, the starting rush-register meter of active client is set Number is 0;
The client identification includes at least one in the physical address and user name of client.
3. a kind of cybersquatting current-limiting method according to claim 1 or 2, which is characterized in that the method also includes:
According to preset rules, time window preset value M is set;
The preset rules include:
Time window preset value M when registering transaction packet high-volume is intensively sent is shorter than M value when registering transaction packet is sent on a small quantity.
4. a kind of cybersquatting current-limiting apparatus, which is characterized in that described device includes:
Timer is T for the initial count time to be arranged0With record current count time Tt
Counter is rushed to register for setting starting and is counted as 0 and records currently to rush to register to count n;
Acquisition module, for acquiring current count time TtN is counted with current rush to register;
Comparison module, for comparing current count time TtWith initial count time T0Difference DELTA T (Tt-T0) default with time window The relative size of value M;
Accumulator module, for receiving current transaction return code, the value of counter is that current rush to register counts n cumulative 1;
Judgment module counts aggregate-value n+1 and the relative size per second for rushing to register transaction threshold N for judging currently to rush to register;
Determining module is connected, for disconnecting or connecting flow.
5. a kind of cybersquatting current-limiting apparatus according to claim 4, which is characterized in that described device further includes flow prison Survey module;The flow monitoring module is for monitoring real-time traffic, the flow monitoring module and the judgment module and described Determining module is connected to be connected.
6. a kind of cybersquatting current-limiting apparatus according to claim 4 or 5, which is characterized in that the acquisition module and institute It states timer to be connected with the counter, the current count time T of the acquisition module acquisitiontN difference is counted with current rush to register By the counter and timer record.
7. a kind of cybersquatting current-limiting apparatus according to claim 6, which is characterized in that the timer is compared with described Module is connected, and the comparison module is connected with the accumulator module, and the accumulator module is connected with the counter;The comparison Module receives the current count time T of timer transmissiontWith initial count time T0Information, compare difference DELTA T (Tt-T0) Triggering information is sent to tired when Δ T is less than M, receives current transaction return code with the relative size of time window preset value M Add module, counter, which is currently rushed to register, counts n cumulative 1;The initial count time when Δ T is greater than or equal to M, and setting records again For Tt, starting rush-register when recording again is set and is counted as 0.
8. a kind of cybersquatting current-limiting apparatus according to claim 7, which is characterized in that the counter and the judgement Module is connected, and the judgment module is connected with the connection determining module;After the judgment module receives the result of counter Current rush to register of judgement counts aggregate-value n+1 and the relative size per second for rushing to register transaction threshold N, and judging result is sent to the connection Determining module, instruction client disconnects or connection flow.
9. a kind of cybersquatting current limiting system, which is characterized in that including device described in claim 4 or 5 and server;
The server, for receiving and sending computer instruction;The server and the timer, counter, compared with mould Block, accumulator module, judgment module are connected with connection determining module.
10. a kind of cybersquatting current limiting system according to claim 9, which is characterized in that the server receives and hair The computer instruction out refers to including rush-register trading instruction, riming instructions, counting instruction, compare instruction, accumulated instruction, judgement Enable and disconnect instruction.
CN201710347848.5A 2017-05-17 2017-05-17 A kind of cybersquatting current-limiting method, apparatus and system Pending CN108965158A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710347848.5A CN108965158A (en) 2017-05-17 2017-05-17 A kind of cybersquatting current-limiting method, apparatus and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710347848.5A CN108965158A (en) 2017-05-17 2017-05-17 A kind of cybersquatting current-limiting method, apparatus and system

Publications (1)

Publication Number Publication Date
CN108965158A true CN108965158A (en) 2018-12-07

Family

ID=64461386

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710347848.5A Pending CN108965158A (en) 2017-05-17 2017-05-17 A kind of cybersquatting current-limiting method, apparatus and system

Country Status (1)

Country Link
CN (1) CN108965158A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114928540A (en) * 2022-05-13 2022-08-19 南京炫佳网络科技有限公司 Preemptive injection method, device, electronic equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110093584A1 (en) * 2009-10-20 2011-04-21 Chaoxin Qiu System and method to prevent endpoint device recovery flood in NGN
CN102708005A (en) * 2012-01-16 2012-10-03 陈晓亮 System and method for virtual resource competition
CN105100070A (en) * 2015-06-29 2015-11-25 北京奇虎科技有限公司 Method and device for preventing malicious attacks to interface service
CN106060189A (en) * 2016-07-08 2016-10-26 厦门纳网科技股份有限公司 Distributed domain name registration system

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110093584A1 (en) * 2009-10-20 2011-04-21 Chaoxin Qiu System and method to prevent endpoint device recovery flood in NGN
CN102708005A (en) * 2012-01-16 2012-10-03 陈晓亮 System and method for virtual resource competition
CN105100070A (en) * 2015-06-29 2015-11-25 北京奇虎科技有限公司 Method and device for preventing malicious attacks to interface service
CN106060189A (en) * 2016-07-08 2016-10-26 厦门纳网科技股份有限公司 Distributed domain name registration system

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114928540A (en) * 2022-05-13 2022-08-19 南京炫佳网络科技有限公司 Preemptive injection method, device, electronic equipment and storage medium
CN114928540B (en) * 2022-05-13 2024-02-23 南京炫佳网络科技有限公司 Preemption method and device, electronic equipment and storage medium

Similar Documents

Publication Publication Date Title
US20140022899A1 (en) System and method for controlling threshold testing within a network
TWI473478B (en) Network communication control method and system
CN107634915A (en) Data transmission method, device and storage medium
CN106411934A (en) DoS(denial of service)/DDoS(distributed denial of service) attack detection method and device
CN107395782A (en) A kind of IP limitation controlled source information extraction methods based on agent pool
CN110809060B (en) Monitoring system and monitoring method for application server cluster
CN102055677A (en) Method and device for reducing network congestion
CN106254394B (en) A kind of recording method and device of attack traffic
CN113645118B (en) Industrial internet identification flow caching processing method based on SDN
CN109728981A (en) A kind of cloud platform fault monitoring method and device
CN106452941A (en) Network anomaly detection method and device
CN105847377A (en) Cluster network's request congestion and overload processing method and system
CN103260190A (en) Security audit system based on evolution grouping system network and security audit method of security audit system
CN1450756A (en) Method for real time detecting ethernet connected computer on-line state through insertion equipment
CN112969172B (en) Communication flow control method based on cloud mobile phone
CN111404918A (en) Cloud mobile phone distributed service emergency authentication method, device and system
CN107426108A (en) TCP jamming control methods, device and service end
CN106709053A (en) Data slice management method and system
CN108965158A (en) A kind of cybersquatting current-limiting method, apparatus and system
CN109802868A (en) A kind of mobile application real-time identification method based on cloud computing
CN100413248C (en) Improved method and system for carrying out charging based on flow
CN110569238B (en) Data management method, system, storage medium and server based on big data
CN107995199A (en) The port speed constraint method and device of the network equipment
CN106230649A (en) session resource management method and device
CN114844835A (en) Self-adaptive dynamic current limiting method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20181207