Abstract: A domain name resolution method may include sending, by user equipment, a first resolution request to a protection device. The method may include sending, by the protection device, a CNAME response to the user equipment in response to the first resolution request. The method may include sending, by the user equipment, the a second resolution request to the protection device. The second resolution request may include an identification information of the user equipment and a target domain name based on the CNAME response. The method may include validating, by the protection device, the identification information, and in response to successful validation, sending a third resolution request to a domain name server. The method may include determining, by the domain name server, that the third resolution request is sent by the protection device based on an indicator information, and in response, resolving, the target domain name in the third resolution request.

Abstract: A method for processing session and a device thereof, a server and a storage medium are provided. The method includes: capturing packets sent from a client associated with the session; reconstituting a packet flow of the session from the captured packets based on quintets of the packets, wherein the quintet comprises a source address, a destination address, a source port, a destination port and a protocol number of the packet; extracting a behavior attribute of the client from the packet flow; determining that the behavior attribute of the client is beyond a baseline; and interrupting the session with the client.

Abstract: A method for processing session and a device thereof, a server and a storage medium are provided. The method includes: capturing packets sent from a client associated with the session; reconstituting a packet flow of the session from the captured packets based on quintets of the packets, wherein the quintet comprises a source address, a destination address, a source port, a destination port and a protocol number of the packet; extracting a behavior attribute of the client from the packet flow; determining that the behavior attribute of the client is beyond a baseline; and interrupting the session with the client.

Abstract: A domain name resolution method may include sending, by user equipment, a first resolution request to a protection device. The method may include sending, by the protection device, a CNAME response to the user equipment in response to the first resolution request. The method may include sending, by the user equipment, the a second resolution request to the protection device. The second resolution request may include an identification information of the user equipment and a target domain name based on the CNAME response. The method may include validating, by the protection device, the identification information, and in response to successful validation, sending a third resolution request to a domain name server. The method may include determining, by the domain name server, that the third resolution request is sent by the protection device based on an indicator information, and in response, resolving, the target domain name in the third resolution request.