Dynamic network safety device and method of network treatment apparatus

Abstract

A dynamic network security device and method for a network processor. A method for loading a security algorithm into a fast path of a network processor is disclosed, comprising: receiving a request to connect to the network processor from a first network client; providing multiple available security algorithms for the first network client; Determining which of the plurality of available security algorithms will be used to communicate with the first client according to a selection made by the first network client; and using the plurality of available security algorithms to be used to communicate with the first client A security algorithm selected by a client for communication is downloaded to the network processor.

Description

[0001] This application is a divisional application of the invention patent application with the original application number 03156084.9 (application date: August 29, 2003, invention name: dynamic network security device and method for network processor). technical field [0002] The invention relates to a processor, in particular to a device and a method for dynamically loading a security algorithm in a network processor according to network conditions. Background technique [0003] The growth in the use of network communications, especially packet-switched networks such as the Internet, has increased the need for more effective network security. In this way, as more and more potentially valuable information is transmitted through the communication network, more unauthorized personnel are attracted to leak the information. [0004] There are various known techniques for compromising the security of packet-switched communication networks or network communication devices (such...

AI Technical Summary

Problems solved by technology

As such, security measures or algorithms employed in network processors to respond to cybersecurity attacks are static (that is, cannot be changed at runtime) and cannot respond to more than one type of cybersecurity attack

[0007] In addition, known network processors do not employ conventional operating systems, although operating systems may be employed to selectively manage the execution of multiple applications or processes because conventional operating systems would slow down the execution of security algorithms by network processors. speed

Thus, in practice network processors are also static (that is, they are programmed to respond to a single type of network security threat), and the security algorithms executed by network processors cannot be changed at runtime

Images