How to make effective strategies when an enterprise website is attacked?

You should know how your website is attacked in advance. The following four types of attacks are conventional:

1. Traffic attack: we often refer to DDOS and DOS attacks. This attack belongs to the bandwidth attack of the most common traffic attack. Generally, a large number of data packets are used to flood one or more routers, servers and firewalls, making your website paralyzed and unable to open normally. However, the cost of such attacks will be very high, so don't panic when encountering such attacks. In addition, you can try the defense system, so that the attacks will not mainly target your website.

2. CC attack: It is also a kind of traffic attack. CC is to simulate multiple users (the number of threads is the number of users) to constantly access pages that require a lot of data operations (that is, a lot of CPU time), resulting in a waste of server resources. The CPU stays at 100% for a long time, and there are always endless connections until network congestion, Normal access was aborted. CC attacks are basically attacks against ports. These two attacks are basically attacks against hard traffic. Let's talk about some attacks against database security.

　　 3. Data destroying attacks: In fact, what is said here is not a hard attack. This is to get the management authority of the website to modify the content of the page. This kind of intrusion is fatal to the website. Not only will the search engine reduce its authority, but also it will lose a large number of users. Reducing the harm caused by such intrusion requires frequent backup of website data and key website programs, and it is better to pack them into local computers; Set the permissions of key documents; It is better to use full static pages for websites, because static pages are not easy to be attacked by hackers; Do not use weak passwords for ftp and background related passwords