Unlock instant, AI-driven research and patent intelligence for your innovation.

Method and device for upgrading detection engine in firewall equipment

A detection engine and firewall technology, applied in the network field

Active Publication Date: 2018-08-21
XFUSION DIGITAL TECH CO LTD
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a detection engine upgrade processing method and device for reducing missed detection problems caused by detection engine upgrades in the prior art

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for upgrading detection engine in firewall equipment
  • Method and device for upgrading detection engine in firewall equipment
  • Method and device for upgrading detection engine in firewall equipment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0042] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

[0043] figure 1 It is a flow chart of Embodiment 1 of the method for upgrading the detection engine in the firewall device of the present invention, figure 2 It is a schematic diagram of the application scenario of Embodiment 1 of the method for upgrading the detection engine in the firewall device of the present invention, image 3 It is an il...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Embodiments of the present invention provide a method and an apparatus for upgrading a detection engine in a firewall device. The method for upgrading a detection engine in a firewall device comprises: generating a first functional component in a new version according to a software upgrade data packet of the detection engine, and running the first functional component in the new version in the detection engine, so as to detect a first conversation by using the first functional component in the new version; if there is at least one second conversation, detecting a subsequent packet of the second conversation by using a first functional component in an old version until the second conversation ages; and after all second conversations age, destroying the first functional component in the old version. In the embodiments of the present invention, only a functional component needing upgrade is upgraded, and after a conversation ages, a functional component used for detecting the conversation is destroyed, so that resource occupation is small, upgrade efficiency is high, and security detection for existing service traffic is not affected.

Description

technical field [0001] The embodiment of the present invention relates to network technology, and in particular to a method and device for upgrading a detection engine in a firewall device. Background technique [0002] A basic requirement of the gateway device is the reliability of the device's work. For example, user traffic will not be interrupted due to software version upgrades, and user services will not be affected. For gateway devices such as Next Generation Firewall (NGFW for short), higher requirements are required. NGFW not only has the basic forwarding control functions of traditional firewalls, but also controls policies based on applications and users. The security detection policy of the application layer traffic flowing through the device, these security detections include intrusion prevention system (Intrusion Prevention System, referred to as IPS), anti-virus (Anti-Virus, referred to as AV), uniform resource locator (Uniform Resource Locator, URL) filterin...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/24H04L29/06
CPCH04L63/02H04L63/0227H04L63/20H04L67/34
Inventor 李世光蒋武
Owner XFUSION DIGITAL TECH CO LTD