Defensive installation for security of router, defense system and method

Abstract

The invention relates to a defending device which has active defense function for routers, a defending system which consists of the defending device, routers and a remote control platform and a method which can actively defend routers. The defending device of the invention comprises a system administration module, an intrusion detection module, a router control module, an audit logging module and a remote control response module. The defending device, system and platform of the invention utilize the Libpcap function library, adopt a bottom-layer packet capture technique which is integrated with an intrusion detection technique, parse whether the data packets are normal or not by a method of data stream analysis, monitor and obstruct the illegal data stream according to whether the data packets are normal or not and give an alarm to the administrators of the remote control platform by the audit logging module. The defending device, system and platform of the invention greatly increase the safety performance and the anti-attack performance of routers and effectively protect the normal operation of the whole network, thereby providing a network administration platform where the network administrators can detect potential safety hazards, receive the feedback of the information of potential safety hazards and process the information of potential safety hazards in time.

Description

【Technical field】 [0001] The invention belongs to the field of network information security, and in particular relates to a defense device with an active defense function for routers, a defense system composed of the defense device, a router and a remote control platform, and a defense method. 【Background technique】 [0002] With the increasing popularity of the Internet, people rely more and more on the network. At the same time, higher requirements are placed on the stability of the network. The router is the core and heart of the entire network. If a router fails fatally, the local network will be paralyzed. If it is a backbone router, the scope of impact will be even greater. Therefore, it is very necessary to carry out security defense on routers. [0003] At present, in practice, there are many security defense methods for routers. Such as: regularly update the router operating system to correct programming errors, software flaws, service vulnerabilities and buffer o...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem of adopting passive defense for router protection in the prior art, the present invention provides a defense device with active defense function for routers

[0007] In

Images