Data detection method and device for firewalls

Abstract

The embodiment of invention provides a data detection method and a data detection device for firewalls. The data detection method for the firewalls comprises the following steps of: receiving application data; acquiring application information in the received application data; according to the application information and an application identification table, judging a corresponding application protocol type of the application data; according to the application protocol type, inquiring a threat detection configuration item so as to judge whether the application data need to be subjected to threat detection; and if the application data do not need to be subjected to threat detection, forwarding the application data. Due to the adoption of the data detection method and data detection device for the firewalls disclosed by the embodiment of the invention, the problem that the performance of a firewall degrades because all application data are sent to a detection processor to be subjected to detection is avoided, and the detection effect of the firewall on the application data is improved.

Description

[0001] This application claims the priority of the Chinese patent application with the application number 201110459872.0 and the title of the invention "Firewall data detection method and device" filed with the China Patent Office on December 31, 2011, the entire contents of which are incorporated in this application by reference . technical field [0002] The embodiments of the present invention relate to network security technologies, and in particular to a data detection method and device for a firewall. Background technique [0003] With the rapid development and wide application of computer and network technology, modern information technology has played a huge role in promoting the progress of human civilization. However, the openness of the information network leads to many loopholes in security. Hacker attacks, worms, and malicious codes are emerging in large numbers, and the risks faced by information networks are increasing day by day. In order to achieve defense...

AI Technical Summary

Problems solved by technology

[0004] The above technical solution has at least the following problems in practical application: Since the fast forwarder needs to send all the received application data to the detection processing device for detection, when the amount of received application data is large, due to the processing capacity of the detection processing device Limited, when detecting a large amount of application data, the detection effect is not good

Images