Network controlling method and device thereof

Abstract

The invention provides a network controlling method and a device thereof, wherein the network controlling method comprises the steps of acquiring the dynamic attribute of a user identification; acquiring a network controlling mode which corresponds with the dynamic attribute of the user identification according to a preset mapping relationship between the dynamic attribute and the network controlling mode; and performing the network controlling mode on a network behavior which corresponds with the user identification. The network controlling method and the device improve dimensions of the dynamic attribute in fixed dimensions, so that a user can select a network control strategy more flexibly. Compared with the network control mode with the fixed dimension, the network control mode of the invention has an advantage of improved network controlling capability.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network management and control method and device. Background technique [0002] With the rapid development of the Internet, the Internet has brought great convenience to people's life and work, but it has also brought about network security problems. Comprehensive management and control of the network can be achieved by deploying a security gateway at the network egress. [0003] Traditional security gateways formulate security policies based on the "4W1H" dimension, that is, for a user (Who, generally user name, IP, MAC address) at what time (When) and where (Where) to use and what Internet tool (How) to use Which application (What) is used as the control strategy, because the content of these dimensions is fixed and lacks flexibility. For example, traditional gateways control the network by restricting users whose P2P download speed exceeds 2M. If malicious users us...

AI Technical Summary

Problems solved by technology

[0003] Traditional security gateways formulate security policies based on the "4W1H" dimension, that is, for a user (Who, generally user name, IP, MAC address) at what time (When) and where (Where) to use and what Internet tool (How) to use Which application (What) is used as the control strategy, because the content of these dimensions is fixed and lacks flexibility. For example, traditional gateways control the network by restricting users whose P2P download speed exceeds 2M. If malicious users use 1.8 M download speed for P2P downloading, traditional network control methods cannot control the malicious user, resulting in weak network control capabilities

Images