Method, equipment and system for processing active detection response

Abstract

The invention discloses a method, equipment and a system for processing an active detection response. The method comprises the following steps: current equipment receives an active detection request from remote equipment, obtains an IP (internet protocol) address of the remote equipment and obtains the positive logic active detection response corresponding to the active detection request; the current equipment judges whether the IP address is within an IP address credible region range or not; if the IP address is within the IP address credible region range, the current equipment sends the positive logic active detection response to the remote equipment; if the IP address is not within the IP address credible region range, the current equipment performs negative logic treatment on the positive logic active detection response, obtains a negative logic active detection response and sends the negative logic active detection response to the remote equipment. According to the embodiment of the invention, an attacker can be prevented from mining key network data from the active detection response, so that an attack behavior cannot be made, the network security is improved, and insecurity, information leakage and the like caused by positive logic are avoided.

Description

technical field [0001] The present invention relates to the fields of communication technology and security technology, in particular to a processing method, device and system for active detection and response. Background technique [0002] With the rapid development of computer and network technology, the scale of the network is constantly expanding, the bandwidth is constantly increasing, the types of network services are becoming more and more diverse, and various devices in the network are becoming more and more diverse. If the attacker wants to launch an attack, the attacker needs to obtain and collect information on the attack target in advance, that is, the first step of the attack is to obtain and collect information, so as to grasp the system information and network structure of various devices in the target network , services provided and other information to prepare for subsequent attacks. In order to obtain information such as system information, network structu...

AI Technical Summary

Problems solved by technology

[0005] Therefore, in the prior art, there are problems such as insecurity and information leakage in the feedback of the active detection response, which greatly facilitates the implementation of subsequent attacks by the attacker, and there are serious security risks.

Images