Method and system for network application firewall

Abstract

The invention provides a network application fire wall method and system. The method comprises the following steps: obtaining a data packet; determining whether the session to which the data packet belongs is already included in a session list; if so, inserting the data packet into the session, extracting the load of the data packet, and reorganizing the load to be application layer information; otherwise, inserting the data packet as a new session into the session list, extracting the load of the data packet, and reorganizing the load to be application layer information; decoding the application layer information to obtain decoded data; and determining whether the data packet belongs to safety information according to the decoded data, and if so, releasing the data packet, otherwise discarding the data packet. By adopting the method, the efficiency of application layer information reorganization and the efficiency of depth analysis of the data packet are effectively improved.

Description

technical field [0001] The invention relates to the field of network firewalls, in particular to a method and system for network application firewalls. Background technique [0002] Due to the fast and convenient functions of the network, it is more and more widely used in people's life and work, so that various computing and business resources in the network are gradually concentrated in its data center, and the Web (network, Internet, etc.) and other technologies) as a universally applicable network platform, users store more and more important data in the network. While the openness of the Web brings abundant resources, high efficiency, and new working methods, it also makes users' important data dangerous to leak through the Internet. [0003] With the widespread application of the Web comes various hacker attacks against Web applications. Statistics from Gartner (Gartner Consulting Company) show that 75% of attacks on the Internet are currently targeted at Web applicat...

AI Technical Summary

Problems solved by technology

[0011] In order to enable the data information to pass through the network quickly, the data information is divided into several discrete data packets during the transmission process, and the application layer information of the data information is scattered in the discrete data packets, which causes difficulties for the in-depth analysis of the data packets. Difficult, and when the rules are matched, because the out-of-order data packets are matched, it also makes it difficult to judge whether the obtained data packets are safe

Images