Method and apparatus for preventing reject access aggression

Abstract

The invention relates to the communication security field and provides a method and a device for preventing refusal access attack, aiming at solving the shortcomings of high cost and low accuracy of preventing SYN flood attack in the prior art. The method comprises the following steps: a believable IP address list is set in network equipment, which stores the believable IP address and a TCP port number; when a user initiates a connection request, the network equipment judges whether the target TCP port and the source IP address of the connection request are matched with the corresponding record in the believable IP address list, if so, the connection is allowed to be established, otherwise, the connection is refused to be established. The invention has the advantages of high reliability, low cost, and not being carried out on firewall, and the network equipment using the method has higher speed of processing connection compared with the method for preventing refusal access attack in the prior art.

Description

technical field [0001] The invention relates to the network field, in particular to network security access technology, specifically a method and device for preventing access denial attacks. Background technique [0002] With the continuous development of network technology, it has brought more and more convenience to people, and people have become more and more dependent on it, but this has also brought certain challenges to the security and reliability of the network. While experiencing the convenience brought by the network, people are beginning to pay more and more attention to the security and reliability of the network. [0003] As a reliable transmission protocol, TCP is implemented on almost all network devices. In addition, the WWW servers that people often visit also use the TCP protocol for transmission. Because of its widespread use, hackers often use denial-of-service attacks to destroy TCP services provided by network devices, and the most commonly used TCP de...

AI Technical Summary

Problems solved by technology

[0017] The object of the present invention is also to provide a device for preventing denial of access attacks, which is used to solve the problem that the legitimacy of the connection cannot be accurately judged in the prior art, and can overcome the deficiency that the prior art must be implemented on a firewall device

Images