Firewall data detection method and device

Abstract

A data detecting method and apparatus for a firewall device connected with a network to identify security threat in the data, where the method is implemented by a fast forwarder in the firewall device and includes: the fast forwarder receives application data; obtains application information in the received application data; determines an application protocol type corresponding to the application data according to the application information and an application identifying table; queries a configuration item for threat detection according to the application protocol type to determine whether the application data requires threat detection; and if the application data does not require threat detection, forwarding the application data. The data detecting method avoids a problem that performance of a firewall is degraded because all application data is sent to a detecting processor in the firewall device for detection, thereby improving an performance of the firewall device.

Description

[0001] This application claims the priority of the Chinese patent application with the application number 201110459872.0 and the title of the invention "Firewall data detection method and device" filed with the China Patent Office on December 31, 2011, the entire contents of which are incorporated in this application by reference . technical field [0002] The embodiments of the present invention relate to network security technologies, and in particular to a data detection method and device for a firewall. Background technique [0003] With the rapid development and wide application of computer and network technology, modern information technology has played a huge role in promoting the progress of human civilization. However, the openness of the information network leads to many loopholes in security. Hacker attacks, worms, and malicious codes are emerging in large numbers, and the risks faced by information networks are increasing day by day. In order to achieve defense...

AI Technical Summary

Problems solved by technology

[0004] The above technical solution has at least the following problems in practical application: Since the fast forwarder needs to send all the received application data to the detection processing device for detection, when the amount of received application data is large, due to the processing capacity of the detection processing device Limited, when detecting a large amount of application data, the detection effect is not good

Images