Unlock instant, AI-driven research and patent intelligence for your innovation.

Method for improving network security

A security and network technology, applied in the field of network security, can solve the problems of being at a loss to prevent attack packets, and achieve the effect of ensuring normal operation and shortening the cycle.

Active Publication Date: 2011-05-11
ZTE CORP
View PDF1 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] As shown in Figure 1, the existing IpStream technology is applied to network devices, and the attacking user can only be identified through the abnormal traffic sampled by IpStream, but it is often helpless to prevent attack packets
That is to say, in the current network where IpStream technology is applied, there is still a lack of effective blocking of offensive data flow and design of CPU (Central Processing Unit) protection for network equipment, and users can only observe the actual state of the network on the server side, so Existing technologies have deficiencies or even defects, and need to be further improved and developed

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for improving network security
  • Method for improving network security
  • Method for improving network security

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0032] The present invention provides a method for improving network security to solve the problem of how to optimize network data flow based on IpStream technology, block network attacks, and effectively protect the security of network equipment CPU. Specific embodiments are described in detail below, but not as a limitation to the present invention.

[0033] As shown in Figure 2, the main technical idea of ​​the present invention is to solve the existing problem of inability to accurately measure and count IP data streams while simultaneously realizing IP data streams by reusing the network equipment IpStream technology to classify data streams. Intelligently intercept and effectively protect the CPU, and for this invention, a modular design is carried out, which maintains a good relative independence from IpStream technology.

[0034] With reference to Figures 2 and 3, the specific steps described in the embodiment of the present invention include:

[0035] Step 101: first...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The present invention discloses a method for improving network security. Network equipment and a server are first configured, wherein, the present invention also comprises the following steps that: (1) a data stream classification submodule is arranged in an IP data stream module; (2) the configuration of security level is carried out to the IP data stream module; the server filters the messages sent on the basis of data stream classification by the data stream classification submodule according to the current security level configuration; (3) the network equipment process the messages according to processing policies sent down by the server. The present invention solves the problems how to optimize network data stream on the basis of the IpStream technology, obstruct network attack and protect the CPU security of the network equipment effectively.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method for intelligently improving network security on the basis of IpStream (IP data flow) functions of computers and communication system equipment. Background technique [0002] IpStream is a technology for detailed behavior pattern analysis and measurement of communication traffic in IP / MPLS (Multiprotocol Label Switch) networks, and can provide accurate statistical data of network operation. It is necessary to realize abnormal communication traffic detection and parameter qualitative analysis when performing network security management. [0003] To detect abnormal traffic in the network, it is necessary to conduct baseline analysis on the normal communication of different types of services in the network, including measuring and counting the daily traffic and flow data of different services and calculating the reasonable range of the baseline. The accurate statistical data...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L12/24H04L12/26
Inventor 孟伟何辉张丽晖
Owner ZTE CORP