2results about How to "Implement security detection" patented technology

This application provides a security protection method and a security resource pool. The method includes: obtaining service traffic from a service switch through a traffic splitter deployed on a third server and forwarding it to an orchestrator deployed on a second server; using the orchestrator, sequentially forwarding the service traffic to corresponding security devices for security detection according to a preset security service chain, wherein the security devices are deployed on a first server; the traffic splitter, the orchestrator, and the security devices are all virtual machines; using the orchestrator, the service traffic that passes the security detection is returned to the service switch via the traffic splitter. Through a full-dimensional redundancy design from the underlying platform to virtual network elements, the single point of failure problem is completely solved, the availability of the security resource pool is improved, and continuous security protection of service traffic is achieved.

This invention discloses a message security detection method, device, and storage medium. The method includes: acquiring a message to be detected based on an intermediate system-to-intermediate system routing protocol; determining a first data structure for the message content based on the message to be detected; if a pre-determined message detection rule determines the existence of a historical message to be detected, analyzing the historical message and the first data structure to determine the message's legitimacy. This solves the problem of not being able to detect abnormal ISIS messages in a timely manner. By analyzing the message to be detected to determine the first data structure for the message content, and determining whether a historical message to be detected exists according to the pre-determined message detection rule, if so, analyzing the historical message and the first data structure to determine the legitimacy of the message to be detected, this invention achieves security detection of messages formed by intermediate system-to-intermediate system routing protocols, enabling timely detection of abnormal messages and improving data security.