Uniform intimidation managing device and loading method of intimidation defense module

Abstract

The example of the invention discloses a method for loading unified threat management equipment and a threat defending module, the equipment comprises at least a threat defending module and a self-adaptive loading module which is used to dynamically load the threat defending module according to processing performance information of the unified threat management equipment, the method comprises: obtaining the processing performance information of the unified threat management equipment after the unified threat management equipment receives message and loading the threat defending module according to the processing performance information. From the above technical scheme, the example of the invention dynamically loads the threat defending module through a self-adaptive dynamic adjustment mode namely the processing performance of the equipment, which considers to various security defending functions and normal service processing abilities of the equipment and guarantees the throughput of the equipment to the maximum.

Description

technical field [0001] The invention relates to a network processing device and an application method thereof, in particular to a unified threat management device and a method for loading a threat defense module. Background technique [0002] With the development of network applications, network security requirements are also being updated. Traditional firewalls are mainly aimed at the attack detection of a single packet, and their defense capabilities against application-layer threats are insufficient. Therefore, based on the existing firewalls, a unified threat management is proposed. (Unified Threat Management, UTM) solution. The unified threat management device integrates the firewall and some application-layer threat defense functions, including anti-virus (Anti Virus, AV), intrusion prevention system (Intrusion Prevention System, IPS), anti-spam (Anti Spam, AS), and unified resource location (Uniform ResourceLocation, Uniform Resource Location) filtering, etc. These f...

AI Technical Summary

Problems solved by technology

However, in most cases, the unified threat management device needs to perform security analysis and detection on a large amount of message content, such as anti-spam, anti-virus, etc., all need to scan the content of the entire message to determine the security of the message , and the software in the existing unified threat management device cannot meet the processing performance requirements of the device, and the use of hardware acceleration will increase the cost of the device rapidly

[0007] 2) Once the network traffic exceeds the processing capacity of the unified threat management device, the packets will be randomly discarded, and all services may be greatly affected, and the operation of key services cannot be guaranteed

However, after the QOS function is enabled, the overall performance of the unified threat management device will be further reduced, and the throughput cannot be increased.

Images