Firewall and method thereof

Abstract

The invention provides a firewall, comprising an interception device which is used for sniffing and intercepting access program, an engine device which is used for outputting and indicating the danger level of the access program according to the access program; wherein, the engine device comprises an analysis device which is used for analyzing the characteristic of the intercepted access program;the firewall also comprises a matching device which carries out the matching between the analyzed program characteristic and a database, and an output device which judges the danger level of the access program according to the matching result and is used for the strategy of the user. The firewall scans and analyzes the programs from the dynamic and static perspectives, discovers suspicious information in a process, gives out the danger level of the program by the intelligent analysis on the information, and leads the user to know how to process the program basically.

Description

technical field [0001] The invention relates to a firewall technology. Background technique [0002] At present, the spread of network viruses and malicious program attacks pose a serious threat to the security of computer systems, networks and data. In order to protect the computer system network from attack and infection, many protective measures are currently proposed, among which firewall technology is the most commonly used one. A firewall is a network security management software installed on a personal computer. Users can control computer communication by setting filtering conditions to prevent unsafe network behaviors. A typical filter condition is an application filter condition, through which unsafe applications can be prevented from accessing the network. [0003] However, traditional personal firewalls do not provide users with a decision-making reference on how to set application filtering conditions. Therefore, although firewalls can prevent programs from ac...

AI Technical Summary

Problems solved by technology

[0003]However, traditional personal firewalls do not provide users with a decision-making reference for how to set application filtering conditions. Therefore, although the firewall can prevent programs from accessing the network, which programs It is always up to the user to judge which programs should be blocked and which programs should be released. What users do is entirely based on their own judgment ability. This puts very high technical requirements on users, especially junior users, and it is difficult for ordinary users to make right decision

Images