Abstract: A method, applied to defensive node devices, and the number of defensive node devices being at least two, includes: receiving a signaling request sent by a terminal provided with an APP, the signaling request being used for requesting for establishing a trusted connection with the defensive node devices, and the signaling request at least including information of the terminal and the APP; authenticating the terminal based on the information of the terminal and the APP, establishing, in response to the authenticating the terminal being successful, the trusted connection with the terminal, and forwarding APP traffic from the terminal to a source station of the APP; and returning a dispatching instruction to the terminal, the dispatching instruction being used for instructing a defensive node device to which the terminal sends the signaling request a next time.