关键词: 人工免疫, 统一资源定位符攻击, 黑/白名单, 随机数

Abstract: For preventing URL （Universal Resource Locator） attacks, this paper proposed a model based on artificial immunity. Applying the self-protection mechanism of biological immune system to network security, through deploying resource safely, avoiding guessing primary key, requesting valid check and business exception check, this model prevented URL attack in different levels while responding to valid request normally and made the applications acquire the secondary immunity. This paper also proposed and analyzed the key technology of implementing the model: the algorithm of avoiding guessing primary key and an enhanced static password algorithm based on random number. This model has been applied to two practical applications. The test results and the practical applications confirm the effectiveness of the model.

Key words: artificial immunity, Universal Resource Locator （URL） attack, black/white list, random number