Method for carrying out video stream transmission filtering based on content of network data packet

Abstract

The invention discloses a method for carrying out video stream transmission filtering based on the content of a network data packet, which relates to the technical field of network security. The modules of the method comprise the capturing module of the network data packet, the recombination module of the network data packet and a video stream identification character string matching filtering module, wherein the capturing module of the network data packet refers in particular to capturing the network data packet supporting Windows and Linux systems and simply filtering the captured data packet according to the information of a data information source host IP (Internet Protocol), a target host IP, a service protocol port and the like; the recombination module of the network data packet refers in particular to restoring information source data through excluding the network additional information of consultation, answer, retransmission, packet header and the like according to the same source IP address, a target IP address and an application layer marker character string; and the video stream identification character string matching filtering module refers in particular to the processing of data filtering carried out according to the matching condition of a video stream compression identification in the restored data packet.

Description

(1) Technical field [0001] The invention belongs to the technical field of network security, in particular to a method for filtering video stream transmission based on network data packet content. (2) Background technology [0002] With the rapid development of the Internet, network security has gradually become a potentially huge problem. It involves firewall technology, VPN technology, authentication / PKI technology and intrusion detection technology. These technical methods are used to protect the hardware, software and data in the computer and network system, so that they will not be damaged, changed, or leaked due to accidental or malicious reasons, so as to ensure the continuous, reliable and normal operation of the system, so that Network services are not interrupted. It can be seen that, in addition to the intrusion detection technology, several other items are based on defense. When designing existing protection systems, it is only possible to consider known secur...

AI Technical Summary

Problems solved by technology

Intrusion detection products are not good at identifying and judging internal and targeted violations, and it is not very convenient to record and configure some important non-intrusion behaviors

Although some intrusion detection software already has the function of user-defined rules, it is very difficult to really define a rule related to practical applications (such as only supporting network video transmission in a unique format)

In addition, the current intrusion detection software cannot cover all requirements in terms of efficiency, post-data analysis and mining, data protection, and scalability.

Therefore, the pure intrusion detection software function can only realize part of the network security requirements, and cannot cover the complete network security requirements.

Images