Method for generating attack characteristic database, method for preventing network attack and device thereof

Abstract

The embodiment of the invention disclose a method for generating an attack characteristic database, a method for preventing a network from attacking and a device used for preventing the network attacking; wherein, the method for preventing a network attack comprises: according to the attack characteristic database, the message which is required to transmit to a main control CP is judged whether the message comprises the attack characteristics in the attack characteristic database or not; if yes, the message is carried out corresponding anti-attack treatments according to the attack characteristics; if not, the message is transmitted to the main CP and is cached into an array to be analyzed. The invention can be used for extracting the attack characteristics incurred from a large IPS rule database to form the attack characteristic database; thereby implementing effective real time prevention to the subsequent attacks of the same type and being capable of obtaining better prevention effects simultaneously when the system properties are guaranteed.

Description

technical field [0001] The invention relates to the Internet, in particular to a method for generating an attack feature database, a method for preventing network attacks and a device for preventing network attacks. Background technique [0002] When it comes to secure networks, it is generally divided into three levels, namely equipment security, network security, and business security. Among them, device security is the basis for building a secure network. Therefore, how to ensure the security of network devices, especially network devices of important nodes (such as routers and switches) is a problem that the industry needs to focus on solving. [0003] For the protection of key equipment such as servers, it is natural to think of firewalls. Generally, connecting a firewall to the network interface of the equipment can effectively ensure the security of the equipment. However, it is more difficult to protect devices such as routers, because routers, especially high-end r...

AI Technical Summary

Problems solved by technology

If it is applied to a high-end router based on a distributed architecture, it will take up too many resources and CPU performance, and the effect will be poor

Images