Method and system of controlling access behaviors of client network

Abstract

The invention discloses a method and a system of controlling access behaviors of client network. The method comprises the following steps: a step of detecting client sandbox, capturing system abnormal behaviors caused by visiting malicious network done by the clients, analyzing the system abnormal behaviors, generating a corresponding analysis report and sending the analysis report to a security gateway; a step of receiving the analysis report by the security gateway, choosing a strategy used for dealing with the system abnormal behaviors; a step of controlling the network-visiting behaviors of the clients according to the dealing strategy. The method has the advantages of common protection to the network-visiting behaviors of the clients by the combination of the client sandbox and the security gateway so as to improve safety protection degree of client visiting the network, meanwhile, when the clients visit the network, transparency of network safety state is improved.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to a method and system for controlling network access behavior of a client. Background technique [0002] At present, the commonly used client access network technology usually only uses single-end client sandbox technology or security gateway to protect the client's online behavior. Although the client sandbox can effectively isolate system damage and data leakage caused by viruses and Trojans and other risks, but there are still the following deficiencies: the client sandbox protects the client in a "passive defense" method, and lacks the functions of capturing, analyzing and feeding back to the security gateway for malicious behaviors. In addition, although there are currently solutions in the industry that combine client sandboxes and security gateways to protect clients from surfing the Internet, the client sandboxes and security gateways only provide security protect...

AI Technical Summary

Problems solved by technology

[0002] At present, the commonly used client access network technology usually only uses single-end client sandbox technology or security gateway to protect the client's online behavior. Although the client sandbox can effectively isolate system damage and data leakage caused by viruses and Trojans and other risks, but there are still the following deficiencies: the client sandbox protects the client in a "passive defense" method, and lacks the functions of capturing, analyzing and feeding back to the security gateway for malicious behaviors

In addition, although there are currently solutions in the industry that combine client sandboxes and security gateways to protect clients from surfing the Internet, the client sandboxes and security gateways only provide security protection for clients' online behaviors alone, and cannot To communicate with each other between the client sandbox and the security gateway so as to realize the linkage security protection of the client's online behavior, the protection level is low

Images