Patent ID: 8844034

Claim:
A method for detecting and defending against a Challenge Collapsar (CC) attack, comprising the steps of: recording a number of times m of requests for a webpage and a number of times n of related requests for the webpage within a preset time interval if a user's request of accessing the webpage is a dynamic webpage request; and determining that the webpage is subjected to the CC attack if a value (m−n)/m is greater than or equal to a preset threshold; wherein the step of recording the number of times m of requests for the webpage and the number of times n of related requests for the webpage within the preset time interval if the user's request of accessing the webpage is the dynamic webpage request comprises: (a) determining whether the user's request of accessing the webpage is a recorded request; (b) if the user's request of accessing the webpage is the recorded request, then incrementing the number of times of the request by one and returning to the step (a) until a preset time expires; (c) if the user's request of accessing the webpage is not the recorded request, then determining whether the user's request of accessing the webpage is a related request of the recorded request, wherein if an answer is “yes”, then the number of times of the related request is incremented by one and returns back to the step (a) until the preset time expires; and otherwise, if the answer is “no”, then the user's request of accessing the webpage is recorded as a new request and returns to the step (a) until the preset time expires; and (d) calculating statistics on the number of times m of the user's requests of accessing the webpage and the number of times n of the related requests for the webpage.