Intelligent network firewall equipment and network attack protection method

Abstract

The invention relates to an intelligent network firewall device which comprises a firewall module used for limiting data traffic in accordance with a blocking strategy according to the issued blocking strategy, a honey pot module used for arranging a virtual honey pot system in accordance with preset requirements using unoccupied Internet protocol (IP) addresses and / or ports in a network, monitoring access traffic to the virtual honey pot system, and then determining and recording attack IP addresses and / or ports according to the access traffic, and a safety strategy module used for generating a new blocking strategy according to the attack IP addresses and / or ports recorded by the honey pot module and issuing the net blocking strategy to the firewall module. The invention further relates to a network attack protection method. The virtual honey pot system in a firewall device is used for attracting illegal network attacks, and therefore network attack IP addresses and / or ports can be identified, the safety strategies of the firewall device are dynamically adjusted, the network attack situation which changes dynamically can be adapted to, and new network safety requirements can be adapted to.

Description

Technical field [0001] The invention relates to firewall technology in the field of computer network communication, in particular to an intelligent network firewall device and a network attack protection method. Background technique [0002] With the development and popularization of computer networks, illegal network attacks such as hackers and worms on the network are becoming more and more rampant. In order to protect computer networks and systems, firewalls have emerged. Firewall, also known as Firewall, is a device that helps ensure information security. The device allows or restricts the transmission of data in accordance with specific rules. Specifically, the earlier implementation of firewalls was based on packet filtering, that is, simply comparing IP addresses and ports, and later added the function of state detection on this basis, which has become the main working method of current firewalls. The firewall can be a dedicated piece of hardware or a set of software buil...

AI Technical Summary

Problems solved by technology

[0003] Although the firewall has a certain protective effect on network attacks, the traditional firewall's strategy against network attacks is relatively rigid. As time goes by, it is difficult to adapt to the constantly changing network attack situation. Adapt to new network security requirements

Images