Method and system for classifying network requests
Methods, systems and programming for classifying network requests. In one example, a network request for content to be fetched by a content server is received from a client device. At least one non-internet protocol (IP) key is obtained based on the network request. Whether to deny or allow the network request is determined based on the at least one non-IP key.
1. A method, implemented on at least one machine each of which having at least one processor, storage, and a communication platform connected to a network for classifying network requests, the method comprising:
receiving, from a client device, a network request for content to be fetched by a content server;
obtaining at least one non-internet protocol (IP) key and at least one IP key based on the network request;
in response to the at least one non-IP key and the at least one IP key satisfying a whitelist rule
transmitting content to the client device; and
in response to at least one of the at least one non-IP key and the at least one IP key unsatisfying a blacklist rule
computing a score indicative of a likelihood of denying the network request, and
transmitting content to the client device based on the score satisfying a criterion.
2. The method of claim 1 , further comprising:
denying the network request based on at least one of the at least one non-IP key and the at least one IP key unsatisfying the whitelist rule.
3. The method of claim 1 , wherein the at least one non-IP key is one of a uniform resource identifier (URI) key, a user key, a hypertext transfer protocol (HTTP) key, a location key, and a cookie key.
4. The method of claim 1 , wherein the at least one IP key is one of a peer IP address, a remote IP address, and a proxy IP address.
5. The method of claim 1 , further comprising updating, the whitelist rule in a periodic manner, and wherein the step of determining whether the at least one non-IP key satisfies the whitelist rule is implemented upon receipt of a startup signal at runtime configuration.
6. A system having at least one processor, storage, and a hardware communication platform connected to a network for classifying network requests, the system comprising:
an initializer implemented by the at least one processor and configured to receive, from a client device, a network request for content to be fetched by a content server; and
a matcher implemented by the at least one processor and configured to:
obtain at least one non-internet protocol (IP) key and at least one IP key based on the network request,
in response to the at least one non-IP key and the at least one IP key satisfying a whitelist rule
transmit content to the client device,
in response to at least one of the at least one non-IP key and the at least one IP key unsatisfying a blacklist rule
compute a score indicative of a likelihood of denying the network request, and
transmit content to the client device based on the score satisfying a criterion.
7. The system of claim 6 , wherein the matcher is further configured to deny the network request based on at least one of the at least one non-IP key and the at least one IP key unsatisfying the whitelist rule.
8. The system of claim 6 , wherein the at least one non-IP key is one of a uniform resource identifier (URI) key, a user key, a hypertext transfer protocol (HTTP) key, a location key, and a cookie key.
9. The system of claim 6 , wherein the at least one IP key is one of a peer IP address, a remote IP address, and a proxy IP address.
10. The system of claim 6 , further comprising:
a rule updater configured to update the whitelist rule in a periodic manner, and wherein the matcher is further configured to determine whether the at least one non-IP key satisfies the whitelist rule upon receipt of a startup signal at runtime configuration.
11. A non-transitory machine-readable medium having information recorded thereon for classifying network requests, wherein the information, when read by the machine, causes the machine to perform the following:
receiving, from a client device, a network request for content to be fetched by a content server;
obtaining at least one non-internet protocol (IP) key and at least one IP key based on the network request;
in response to the at least one non-IP key and the at least one IP key satisfying a whitelist rule
transmitting content to the client device; and
in response to at least one of the at least one non-IP key and the at least one IP key unsatisfying a blacklist rule
computing a score indicative of a likelihood of denying the network request, and
transmitting content to the client device based on the score satisfying a criterion.
12. The medium of claim 11 , further comprising:
denying the network request based on at least one of the at least one non-IP key and the at least one IP key unsatisfying the whitelist rule.
13. The medium of claim 11 , wherein the at least one non-IP key is one of a uniform resource identifier (URI) key, a user key, a hypertext transfer protocol (HTTP) key, a location key, and a cookie key.
14. The medium of claim 11 , wherein the at least one IP key is one of a peer IP address, a remote IP address, and a proxy IP address.
15. The medium of claim 11 , further comprising updating, the whitelist rule in a periodic manner, and wherein the step of determining whether the at least one non-IP key satisfies the whitelist rule is implemented upon receipt of a startup signal at runtime configuration.