Application proxy-based network management system isolation control device

Abstract

The invention provides an application proxy-based network management system isolation control device, which comprises an intranet processing unit, an extranet processing unit and a data exchange unit, wherein the intranet processing unit comprises an isolation exchange control module and an application proxy module; the extranet processing unit comprises an isolation exchange control module and an application proxy module; and the data exchange unit consists of a special bus interface and a bus switch and is based on an non-(internet protocol) IP protocol, the special data bus exchanges the data between the intranet processing unit and the extranet processing unit, and prevents attack from the leaks of the transmission control protocol (TCP) / IP. In the invention, the network attack behavior aiming at a TCP stack can be prevented by adopting a specific non-IP protocol and an internal isolation exchange interface.

Description

technical field [0001] The invention relates to network technology, in particular to an isolation control device for a network management system based on an application agent. Background technique [0002] In order to achieve network isolation and data exchange between different network management systems, and to solve the problem of inability to isolate user flows and network flows between network systems, it is necessary to isolate and control network management systems based on application agents, especially to ensure that the Common Object Request Broker system protocol (Common Object Request Broker) Architecture, CORBA), Simple Network Management Protocol (Simple Network Management Protocol, SNMP) protocol, Common Management Information Protocol (Common Management Information Protocol, CMIP) and other effective isolation between different network management protocols. [0003] Traditional border logic isolation devices are generally packet filtering firewalls. At the ne...

AI Technical Summary

Problems solved by technology

In this way, it is unavoidable for attackers to use the loopholes in the TCP / IP protocol itself to carry out network attacks, such as synchronous code flood attack (SynFlood attack), denial of service attack (DoS attack), field anomaly attack (Flag Exception attack), etc.

Images