Security gateway and method thereof for detecting proxy surfing

Abstract

The invention discloses a security gateway and a method thereof for detecting proxy surfing, and the method comprises the following steps: using the security gateway to receive a data packet and obtain a proxy detection item which corresponds to source IP address of the data packet from a pre-configured policy table; leading the security gateway to detect whether ID number of the currently received data packet is larger than the ID number of the data packet which is received at the last time or not, if so, updating the ID number of the data packet which is received at the last time in the proxy detection item to the ID number of the current data packet; otherwise, determining that the ID number generates loop, detecting whether the time difference between the loop time at this time and the last loop time recorded in the detection item is larger than or equal to the preset tolerance time, if so, determining that no proxy surfing exists; otherwise, determining that the proxy surfing exists. The method can effectively judge the IP address using the proxy surfing in a network through the simple detection algorithm and provide the support for preventing the proxy surfing.

Description

technical field [0001] The invention relates to the field of network security, in particular to a security gateway and a method for detecting proxy accessing the Internet. Background technique [0002] At present, the network is already an indispensable tool for our study and office work, especially the use of broadband network is becoming more and more popular. However, in the actual operation process of operators, there is such a problem: some "technical masters" use some characteristics of TCP / IP to install proxy servers or network address translation software on their computers, so that multiple residents can Use the same monthly subscription account to surf the Internet, work in the enterprise, and even set up Internet cafes privately. In the campus network, the above situation is very common. In the community, it has also begun to appear and is spreading rapidly. Ultimately, it will be difficult to recover the huge infrastructure costs invested by operators. Conte...

AI Technical Summary

Problems solved by technology

[0003] The invention provides a security gateway and a method for detecting proxy accessing the Internet, which are used to solve the problem that the proxy cannot detect the proxy accessing the Internet in the prior art

Images