In the Internet era where cyber attacks are rampant, CC attacks can be described as a relatively common attack method and one of the attacks that need to be resisted by websites. If you want to protect a website, you need to take CC protection measures against attacks. When managing websites and servers, the most fearful thing is that the website will be attacked by CC, especially when the bandwidth of the general server is not large. When it is attacked by CC, it is easy to cause the server to crash because the resources are completely preempted.
The principle of the CC attack is very simple. It is to continuously initiate normal requests to some resource-consuming application pages to achieve the purpose of consuming server-side resources. In web applications, the operations of querying the database and reading and writing hard disk files are relatively common. Consume more resources.
CC is mainly used to attack pages. Everyone has this experience. When visiting a forum, if the forum is relatively large and there are more people visiting, the speed of opening the page will be slower. The more people visiting the forum, the more The more pages, the greater the pressure on the database, the higher the frequency of being accessed, and the more system resources it takes up.
The problem that websites need to pay attention to when carrying out CC protection is broadband. Some people say that increasing broadband can effectively prevent such attacks. In fact, the resources that hackers can call are already very large. Increasing broadband may not prevent this kind of attack. Sometimes increasing broadband is likely to lose your broadband cost. This kind of attack, 50M broadband is already very large for many websites, but now hackers can provide a unit traffic attack far more than 50M after mobilizing huge resources, so it is said that this attack can be resisted by increasing broadband Obviously a stupid method.
Some people may have another misunderstanding when it comes to CC protection, which is that they can rely on antivirus software to prevent CC attacks. It is true that installing anti-virus software on servers is now a mode of operation for many people, but these anti-virus software can only prevent common attacks, but cannot withstand such large-scale attacks.
The antivirus software is sometimes even worse than the server's firewall. Installing antivirus software will turn off the server's firewall, so the protection of the server's firewall will be lost. Therefore, the so-called network attack protection software is actually useless and cannot withstand such large-scale attacks.
After understanding the above questions about CC protection on websites, many people may worry that such attacks are simply impossible to defend? In fact, don't worry too much, because this kind of attack is a large-scale and powerful attack, so it will generally not target some small websites.
There are usually several ways to protect CC. One is to cancel domain name binding, the other is to resolve domain spoofing, the third is to change the web port, and the other is to block IP or use a high-defense server. CC attacks are launched mainly for the purpose of seeking huge profits. Websites such as finance and banking that are highly dependent on the network and have very substantial returns have the value of attacking. Therefore, these websites need to increase their security awareness, choose high-defense servers, and even Build a computer room by yourself to prevent network attacks.
This article is from: https://www.zhuanqq.com/News/Industry/302.html