The invention discloses a network
system. The network
system comprises a transparent firewall, a
database firewall, an intelligent inspection device and an emergency device. The transparent firewall is used for analyzing an existing network scanning technology and extracting universal scanning characteristics, and
filtration is conducted with the universal scanning characteristics used as
filtering rules. The
database firewall is used for protecting data. The intelligent inspection device is used for examining the matching degree of an accessed website and a
virus database, providing an abnormal website
processing suggest, conducting communication with a host generating an abnormal website, extracting
attack fingerprint characteristics, and enabling the tack
fingerprint features to be stored in an immune characteristic database. The emergency device is used for conducting restoration on damaged
intranet nodes detected by the intelligent inspection device. The database firewall is sequentially connected with an alarm module, a data uploading module and a data eliminating module. The network
system maintains a good network state, through analysis and memorizing of unknown intrusion behaviors, the network immune capacity is improved, the damaging range can be effectively controlled after the intrusion behaviors are conducted, it is guaranteed that a network is unblocked and services are supplied normally, and the system has self-repairing and restoration capacity and comprehensively maintain stable operation of the network.