Open flow meter security enhancement method and device

An open-flow and secure technology, applied in transmission systems, electrical components, etc., can solve the problems of large differences in security execution units, difficult to achieve centralized control and management, and difficult to achieve interoperability, etc., to defend against zero-day attacks and mitigate distributed Effects of Denial of Service Attacks
CN103095701BActive Publication Date: 2016-04-13ZTE CORP
6 Cites 2 Cited by

Patent Information

Authority / Receiving Office
CN Β· China
Patent Type
Patents(China)
Current Assignee / Owner
ZTE CORP
Publication Date
2016-04-13

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses an open flow table security enhancement method which can enable a security control function to be separated from a security executive function. The method includes the steps of obtaining security application corresponding to each security service, extracting security strategies, security protocols and feature libraries corresponding to the various security services from the security application, analyzing the security strategies of the security services to generate a security flow table, and creating a matching rule in the security flow table, and carrying out access control to messages and inspection for a state firewall, a security virtual private network (VPN) and deep messages according to the matching rule in the security flow table. The invention simultaneously discloses an open flow table security enhancement device. The open flow table security enhancement method and the open flow table security enhancement device can enable the security execution and the security application to be independently evolved and upgraded, and bring convenience to development of new security services, and can intensively carry out security management, resist zero-day attack, and relieve distributed denial of service attack according to the security strategies, and also support a virtualization multi-tenant security mode.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to safety detection technology, in particular to an open flow table safety enhancement method and device. Background technique

[0002] Such as figure 1 As shown, traditional security devices, such as firewalls, intrusion detection and prevention, secure virtual private networks, and unified threat management, are all integrated architectures, in which the interface board 100, security service board 102, main control board 106, and switching board 104 are Tightly coupled, usually located in a physical box; wherein, the interface board 100 provides the interface of the security device and submits the data flow to the security service board 102, and the interface board 100 is usually integrated by a network processor (NP, NetworkProcessor) or application-specific Chip (ASIC, Application Specific Integrated Circuit) implementation. The security service board 102 completes functions such as access policy control, network address tra...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More