Network security accessing and sealing method based on FPGA (field programmable gate array)

Abstract

The invention provides a network security accessing and sealing method and device based on an FPGA (field programmable gate array). The device comprises a network data memory, a user rule memory and a characteristic comparator. The method comprises the steps of receiving an external network data packet, and momentarily memorizing the data packet in a network data memorizer; detecting the characteristic value of the network data packet, wherein the characteristic value comprises a source directory IP (internet protocol) address, a source directory port and a protocol, and monitoring the control bit of a message; querying a corresponding action of the hit data packet with the characteristic value which is coincident with the set source directory IP address, the set source directory port and the set protocol, analyzing the packet header information and the filtration action according to a rule filtering result, and judging whether to transmit the sealing packets and which types of the sealing packets to be transmitted; and transmitting the data packet forged by the construction of the packet transmitting action, and interrupting the network access. After the method is used, the security accessing and sealing are realized, and the ping pang operation is adopted when the data packet is written and read, so that the processing speed of the data flow is increased. The illegal TCP (transmission control protocol) access is interrupted by transmitting the forged data packet, and the access of some illegal networks can be effectively interrupted, so that the safety performance of the network is improved.

Description

technical field [0001] The invention relates to the field of network security, in particular to an FPGA-based network security connection blocking processing method. Background technique [0002] At present, in the internal office network of an enterprise, it is necessary to monitor network usage in the fields of network access control, content filtering, content auditing, and network security. Generally, the bypass monitoring method is used to reduce the burden on the gateway or router. However, the control of the bypass needs to add an additional unit, which increases additional costs. Contents of the invention [0003] The invention provides a method for realizing the blockage processing of the secure connection in the network protocol by adopting the FPGA, which can liberate the utilization rate of the CPU, thereby improving the performance of the host computer. [0004] An FPGA-based network security connection blocking processing method, including a network data me...

AI Technical Summary

Problems solved by technology

However, the control of the bypass needs to add an additional unit, which increases additional costs

Images