Brute-force attack mitigation-Alibaba Gov Cloud-阿里云帮助中心

Currently, no free system solutions are available to mitigate brute-force attacks. You must use commercial security solutions. Most hosts in the cloud have Server Guard deployed. When a brute-force attack source is detected, it is added to the blocklist of a bypass WAF. This provides real-time blocking at the TCP layer using a bidirectional reset to stop further brute-force attacks.

To prevent brute-force attacks, you can use Anti-Bot Service. Anti-Bot Service is a network application security product that effectively detects advanced bots. It reduces the impact of bots and automated tools on your website services. Anti-Bot Service provides a complete solution to protect against malicious bots across web applications, mobile apps, and API operations. This prevents security gaps that can result from weak protection in any single part of your business. 暴力破解

How the solution works

After you purchase and activate Anti-Bot Service, resolve your website's domain name to the canonical name (CNAME) address that the service provides. Then, configure the source server's IP address in the Anti-Bot Service console to enable protection. After you add your website's domain name to Anti-Bot Service, all Internet traffic to your website is routed through the Anti-Bot Service instance. All malicious bot traffic is detected and filtered in the cloud. Normal traffic is then forwarded to the source server. This protects your services from security issues caused by malicious bot traffic, such as data breaches and fraud.

As a last resort against brute-force attacks during critical events, you can immediately cut off access to key protected targets if a severe violation is detected. You can perform this action with a one-click bypass reset. After you install Alibaba Cloud security products, the system identifies these threats and sends real-time notifications. Any actions that you take in the system take effect immediately.

Advantages

Leverages Alibaba Cloud's extensive threat intelligence:
The service analyzes bot behavior across industries and uses relationship networks to improve malicious bot detection. It enables collaborative defense within industries by leveraging an ecosystem approach. The service collects IP address and User Agent data from known malicious bots used in the cyber underground. It also shares threat intelligence based on hundreds of millions of data points gathered from Alibaba Group's business operations.
Multi-scenario and multi-dimensional security protection
The service provides optimal protection solutions against malicious bots for web, H5, mobile apps, and API services. The service offers multi-dimensional mitigation policies to more accurately profile malicious bots. It also provides different responses based on the threat level of the bot.