Security protection method, equipment and system for data packet

Abstract

The invention provides a method, a device and a system for protecting a data packet safely. The method comprises the following steps: receiving the data packet sent by an outside network; judging whether the time to life (TTL) value of the data packet is in a legal interval or not if characteristic data of the data packet exists in a network address translation (NAT) protocol mapping table; and releasing the data packet if the TTL value of the data packet is in the legal interval. By adopting the method, the reliability for the security judging result of the data packet can be enhanced.

Description

technical field [0001] The present invention relates to the technical field of communications, in particular to a data packet security protection method, device and system. Background technique [0002] In theory, using a Network Address Translation (NAT, Network Address Translation) server can allow hosts on the inner private network to access the public network, while hiding the real Internet Protocol (IP, Internet Protocol) address of the private network host from the public network. The public network users outside the NAT server cannot pass through the NAT server to enter the private network hosts, which ensures the security of the private network hosts to a certain extent. [0003] However, in the actual application of communication technology, the public network users outside the NAT server are not hosts that cannot pass through the NAT server to enter the private network. , Transmission ControlProtocol) message as an example: [0004] Example 1: A private network u...

AI Technical Summary

Problems solved by technology

[0012] However, in the process of hacker attacks, most of them are attacks launched by bots, so it is easy to construct IP addresses or protocols that conform to the NAT mapping table

Therefore, the limitation of only restricting the protocol of IP address or NAT data is still very large.

Images