公开(公告)号：US20210160216A1

公开(公告)日：2021-05-27

申请号：US17165737

申请日：2021-02-02

Applicant: Beijing Baidu Netcom Science and Technology Co., Ltd.

Inventor： Chang Liu ,  Shaoyan Wang ,  Li Mi

IPC: H04L29/06

Abstract: An anti-cracking method and system for a cloud host, as well as a terminal device are provided according to the disclosure. The method includes: obtaining system logs of the cloud host; determining an IP which fails to log in the cloud host according to the system logs as a suspicious IP; tracking and determining the suspicious IP to be an attacker IP according to the number of times of consecutive login failure of the suspicious IP; and adding a first blocking rule to firewall settings of the cloud host; wherein the first blocking rule instructs to block a login operation of the attacker IP during a first preset blocking time. With the anti-cracking method for a cloud host of the disclosure, the brute-force cracking can be prevented proactively in a timely manner with only very few system resources occupied.

公开(公告)号：US10944718B2

公开(公告)日：2021-03-09

申请号：US16129778

申请日：2018-09-12

Applicant: Beijing Baidu Netcom Science and Technology Co., Ltd.

Inventor： Chang Liu ,  Shaoyan Wang ,  Li Mi

IPC: H04L29/06

Abstract: An anti-cracking method and system for a cloud host, as well as a terminal device are provided according to the disclosure. The method includes: obtaining system logs of the cloud host; determining an IP which fails to log in the cloud host according to the system logs as a suspicious IP; tracking and determining the suspicious IP to be an attacker IP according to the number of times of consecutive login failure of the suspicious IP; and adding a first blocking rule to firewall settings of the cloud host; wherein the first blocking rule instructs to block a login operation of the attacker IP during a first preset blocking time. With the anti-cracking method for a cloud host of the disclosure, the brute-force cracking can be prevented proactively in a timely manner with only very few system resources occupied.

公开(公告)号：US11470043B2

公开(公告)日：2022-10-11

申请号：US17165737

申请日：2021-02-02

Applicant: Beijing Baidu Netcom Science and Technology Co., Ltd.

Inventor： Chang Liu ,  Shaoyan Wang ,  Li Mi

IPC: H04L9/40

Abstract: An anti-cracking method and system for a cloud host, as well as a terminal device are provided according to the disclosure. The method includes: obtaining system logs of the cloud host; determining an IP which fails to log in the cloud host according to the system logs as a suspicious IP; tracking and determining the suspicious IP to be an attacker IP according to the number of times of consecutive login failure of the suspicious IP; and adding a first blocking rule to firewall settings of the cloud host; wherein the first blocking rule instructs to block a login operation of the attacker IP during a first preset blocking time. With the anti-cracking method for a cloud host of the disclosure, the brute-force cracking can be prevented proactively in a timely manner with only very few system resources occupied.

公开(公告)号：US20190182214A1

公开(公告)日：2019-06-13

申请号：US16129778

申请日：2018-09-12

Applicant: Beijing Baidu Netcom Science and Technology Co., Ltd.

Inventor： Chang Liu ,  Shaoyan Wang ,  Li Mi

IPC: H04L29/06

Abstract: An anti-cracking method and system for a cloud host, as well as a terminal device are provided according to the disclosure. The method includes: obtaining system logs of the cloud host; determining an IP which fails to log in the cloud host according to the system logs as a suspicious IP; tracking and determining the suspicious IP to be an attacker IP according to the number of times of consecutive login failure of the suspicious IP; and adding a first blocking rule to firewall settings of the cloud host; wherein the first blocking rule instructs to block a login operation of the attacker IP during a first preset blocking time. With the anti-cracking method for a cloud host of the disclosure, the brute-force cracking can be prevented proactively in a timely manner with only very few system resources occupied.