Multi-core intelligent network card platform-based ultrahigh-bandwidth network security audit method

Abstract

The invention relates to the field of computer network security, in particular to a multi-core intelligent network card platform-based ultrahigh-bandwidth network security audit method. The method is characterized in that the method includes the following steps that: a multi-core intelligent network card platform is configured; raw messages are received and processed by the multi-core intelligent network card platform; the deep inspection and audit of application data are carried out; and subsequent processing is carried out after audit. Adopting the multi-core intelligent network card platform, the method provides an effective acceleration scheme for a variety of fields, such as network security, flow monitoring, service analysis and signaling test, and can be applied in 100G ultrahigh bandwidth; meanwhile, the mode of shunting the service process is adopted, the application strategy is secure and highly reliable, the deep inspection technology is adopted as well, and thereby the method realizes the functional requirements of network application level security audit, flow control, enterprise level application security policy implementation and the like.

Description

technical field [0001] The invention relates to the field of computer network security, in particular to an ultra-high bandwidth network security audit method based on an intelligent network card multi-core platform. Background technique [0002] With the increasing number of network applications, the demand for bandwidth is also rising, which poses a challenge to the actual software and hardware solutions for security audits. How to realize the security of enterprise applications without sacrificing performance or paying less performance costs Auditing is the focus of successful design. [0003] The technology of in-depth detection is mainly the combination of the technology of application state detection firewall and the technology of identification of application layer data flow, to efficiently identify various applications on the network, and to realize the detection of network application level through the detection of application flow data. Functional requirements suc...

AI Technical Summary

Problems solved by technology

[0012] In response to these problems, technologies such as ASIC chips, network processors, and multi-core processors have emerged one after another, and have more or less solved the above problems from different levels and angles. However, with the rapid improvement of network performance and the rapid enrichment of business functions Compared with the growth rate, these architectures have not been popularized rapidly, and there is still a large gap between excellent chip capabilities and mature application products. This distance restricts the popularity and popularization of the above-mentioned proprietary hardware architectures in the field of security gateways.

Images