Network security processing

1. A method for security processing of a request for a resource in a network security system that includes a computer system containing one or more processors, said method comprising:

receiving, by a distributor component from a client device using the one or more processors, the request for the resource;

creating, by the distributor component using the one or more processors, a duplicate of the received request;

after said creating the duplicate, forwarding, by the distributor component using the one or more processors: (i) the received request directly to a first proxy server and (ii) the duplicate of the received request directly to a second proxy server, wherein the first proxy server and the second proxy server are different types of proxy servers that differ in being from different manufacturers, being from different vendors, having different versions of software stored therein, or combinations thereof;

after said forwarding, receiving, by a comparator component using the one or more processors, a first output from the first proxy server and a second output from the second proxy server, said first output and said second output including the received request and the duplicate of the received request, respectively; and

determining, by the comparator component using the one or more processors, whether the first output and the second output differ from each other, and if not transmitting, by the comparator component using the one or more processors, the received request or the duplicate of the received request to a web server for satisfying the request, and if so generating, by the comparator component using the one or more processors, a first alarm and blocking, by the comparator component using the one or more processors, transmission to the web server of the received request and the duplicate of the received request, wherein said generating the first alarm and said blocking transmission to the web server are in response to a first security breach identified by the determining that the first output and the second output differ from each other, wherein the distributor component is located upstream of the first and second proxy servers, and wherein the comparator component is located downstream of the first and second proxy servers.

2. The method of claim 1 , said method comprising:

determining, by the comparator component using the one or more processors, that the first output and the second output do not differ from each other.

3. The method of claim 2 , said method comprising:

transmitting, by the comparator component using the one or more processors, the received request to the web server.

4. The method of claim 2 , said method comprising:

transmitting, by the comparator component using the one or more processors, the duplicate of the received request to the web server.

5. The method of claim 2 , said method comprising:

after said transmitting the received request or the duplicate of the received request to the web server, receiving, by the comparator component from the web server using the one or more processors, a reply message comprising the requested resource;

creating, by the comparator component using the one or more processors, a copy of the reply message;

after said creating the copy, sending, by the comparator component using the one or more processors: (i) the reply message to the first proxy server and (ii) the copy of the reply message to the second proxy server;

after said sending the reply message and the copy of the reply message, receiving, by the distributor component using the one or more processors, a first message from the first proxy server and a second message from the second proxy server, said first message and said second message being in response to the reply message and to the copy of the reply message, respectively; and

determining, by the distributor component using the one or more processors, whether the first message and the second message differ from each other, and if not transmitting, by the distributor component using the one or more processors, the reply message to client device, and if so generating, by the distributor component using the one or more processors, a second alarm and blocking, by the distributor component using the one or more processors, transmission of the reply message to the client device, wherein said generating the second alarm and said blocking transmission to the client device are in response to a second security breach identified by the determining that the first message and the second message differ from each other.

6. The method of claim 1 , said method comprising:

determining, by the distributor component using the one or more processors, that the first output and the second output differ from each other.

7. The method of claim 6 , wherein the first alarm identifies a type of the first security breach that has been detected.

8. The method of claim 6 , wherein said determining that the first output and the second output differ from each other comprises determining that there is an essential difference between the first output and the second output.

9. A computer program product, comprising one or more computer readable hardware storage devices having computer readable program code stored therein, said program code containing instructions executable by one or more processors of a computer system to implement a method for security processing of a request for a resource in a network security system that includes a computer system containing the one or more processors, said method comprising:

receiving, by a distributor component from a client device using the one or more processors, the request for the resource;

creating, by the distributor component using the one or more processors, a duplicate of the received request;

after said creating the duplicate, forwarding, by the distributor component using the one or more processors: (i) the received request directly to a first proxy server and (ii) the duplicate of the received request directly to a second proxy server, wherein the first proxy server and the second proxy server are different types of proxy servers that differ in being from different manufacturers, being from different vendors, having different versions of software stored therein, or combinations thereof;

after said forwarding, receiving, by a comparator component using the one or more processors, a first output from the first proxy server and a second output from the second proxy server, said first output and said second output including the received request and the duplicate of the received request, respectively; and

determining, by the comparator component using the one or more processors, whether the first output and the second output differ from each other, and if not transmitting, by the comparator component using the one or more processors, the received request or the duplicate of the received request to a web server for satisfying the request, and if so generating, by the comparator component using the one or more processors, a first alarm and blocking, by the comparator component using the one or more processors, transmission to the web server of the received request and the duplicate of the received request, wherein said generating the first alarm and said blocking transmission to the web server are in response to a first security breach identified by the determining that the first output and the second output differ from each other, wherein the distributor component is located upstream of the first and second proxy servers, and wherein the comparator component is located downstream of the first and second proxy servers.

10. The computer program product of claim 9 , said method comprising:

determining, by the comparator component using the one or more processors, that the first output and the second output do not differ from each other.

11. The computer program product of claim 10 , said method comprising:

transmitting, by the comparator component using the one or more processors, the received request to the web server.

12. The computer program product of claim 10 , said method comprising:

transmitting, by the comparator component using the one or more processors, the duplicate of the received request to the web server.

13. The computer program product of claim 10 , said method comprising:

after said transmitting the received request or the duplicate of the received request to the web server, receiving, by the comparator component from the web server using the one or more processors, a reply message comprising the requested resource;

creating, by the comparator component using the one or more processors, a copy of the reply message;

after said creating the copy, sending, by the comparator component using the one or more processors: (i) the reply message to the first proxy server and (ii) the copy of the reply message to the second proxy server;

after said sending the reply message and the copy of the reply message, receiving, by the distributor component using the one or more processors, a first message from the first proxy server and a second message from the second proxy server, said first message and said second message being in response to the reply message and to the copy of the reply message, respectively; and

determining, by the distributor component using the one or more processors, whether the first message and the second message differ from each other, and if not transmitting, by the distributor component using the one or more processors, the reply message to client device, and if so generating, by the distributor component using the one or more processors, a second alarm and blocking, by the distributor component using the one or more processors, transmission of the reply message to the client device, wherein said generating the second alarm and said blocking transmission to the client device are in response to a second security breach identified by the determining that the first message and the second message differ from each other, wherein the distributor component is located upstream of the first and second proxy servers, and wherein the comparator component is located downstream of the first and second proxy servers.

14. The computer program product of claim 9 , said method comprising:

determining, by the distributor component using the one or more processors, that the first output and the second output differ from each other.

15. A computer system, comprising one or more processors, one or more memories, and one or more computer readable hardware storage devices, said one or more hardware storage device containing program code executable by the one or more processors via the one or more memories to implement a method for security processing of a request for a resource in a network security system that includes the computer system, said method comprising:

receiving, by a distributor component from a client device using the one or more processors, the request for the resource;

creating, by the distributor component using the one or more processors, a duplicate of the received request;

after said creating the duplicate, forwarding, by the distributor component using the one or more processors: (i) the received request directly to a first proxy server and (ii) the duplicate of the received request directly to a second proxy server, wherein the first proxy server and the second proxy server are different types of proxy servers that differ in being from different manufacturers, being from different vendors, having different versions of software stored therein, or combinations thereof;

after said forwarding, receiving, by a comparator component using the one or more processors, a first output from the first proxy server and a second output from the second proxy server, said first output and said second output including the received request and the duplicate of the received request, respectively; and

determining, by the comparator component using the one or more processors, whether the first output and the second output differ from each other, and if not transmitting, by the comparator component using the one or more processors, the received request or the duplicate of the received request to a web server for satisfying the request, and if so generating, by the comparator component using the one or more processors, a first alarm and blocking, by the comparator component using the one or more processors, transmission to the web server of the received request and the duplicate of the received request, wherein said generating the first alarm and said blocking transmission to the web server are in response to a first security breach identified by the determining that the first output and the second output differ from each other.

16. The computer system of claim 15 , said method comprising:

determining, by the comparator component using the one or more processors, that the first output and the second output do not differ from each other.

17. The computer system of claim 16 , said method comprising:

transmitting, by the comparator component using the one or more processors, the received request to the web server.

18. The computer system of claim 16 , said method comprising:

transmitting, by the comparator component using the one or more processors, the duplicate of the received request to the web server.

19. The computer system of claim 16 , said method comprising:

after said transmitting the received request or the duplicate of the received request to the web server, receiving, by the comparator component from the web server using the one or more processors, a reply message comprising the requested resource;

creating, by the comparator component using the one or more processors, a copy of the reply message;

after said creating the copy, sending, by the comparator component using the one or more processors: (i) the reply message to the first proxy server and (ii) the copy of the reply message to the second proxy server;

after said sending the reply message and the copy of the reply message, receiving, by the distributor component using the one or more processors, a first message from the first proxy server and a second message from the second proxy server, said first message and said second message being in response to the reply message and to the copy of the reply message, respectively; and

determining, by the distributor component using the one or more processors, whether the first message and the second message differ from each other, and if not transmitting, by the distributor component using the one or more processors, the reply message to client device, and if so generating, by the distributor component using the one or more processors, a second alarm and blocking, by the distributor component using the one or more processors, transmission of the reply message to the client device, wherein said generating the second alarm and said blocking transmission to the client device are in response to a second security breach identified by the determining that the first message and the second message differ from each other.

20. The computer system of claim 15 , said method comprising:

determining, by the distributor component using the one or more processors, that the first output and the second output differ from each other.