A Network Border Detection Method

Abstract

The invention relates to a network boundary detection method. A network card package capturing engine, a data packet analysis module, an ARP detection module and an ICMP detection module are included. The data packet analysis module is equipped with a data packet queue module. The ICMP detection module is provided with TTL detection. The method has the advantages that processing is simple, convenient, rapid and accurate; network safety performance can be effectively foreseen; and an enterprise information safety protection capability is increased.

Description

technical field [0001] The invention relates to a detection method of a network boundary, which belongs to the field of network technology security. . Background technique [0002] At present, many units have two networks, one is an Internet-enabled network for Internet access, and the other is an intranet network for office work; with the rapid development of networks and information technology, business operations are increasingly dependent on the network , users’ network and information security are increasingly facing more and more risks: worms, Trojan horses, spyware, malicious webpages, spam, compound attacks that combine multiple infiltration and destruction technologies, denial of network infrastructure Service attack (DoS / DDoS) has caused huge damage to the operation of the enterprise. At the same time, new problems are still emerging, and network security threats are gradually developing from the network layer to the application layer, from the early attacks on T...

AI Technical Summary

Problems solved by technology

[0002] At present, many units have two networks, one is an Internet-enabled network for Internet access, and the other is an intranet network for office work; with the rapid development of networks and information technology, business operations are increasingly dependent on the network , users’ network and information security are increasingly facing more and more risks: worms, Trojan horses, spyware, malicious webpages, spam, compound attacks that combine multiple infiltration and destruction technologies, denial of network infrastructure Service attack (DoS / DDoS), which caused huge damage to the operation of the enterprise

At the same time, new problems are still emerging, and network security threats are gradually developing from the network layer to the application layer, from the early attacks on TCP / IP protocol vulnerabilities to the attacks on operating system and application vulnerabilities by using the content of TCP / IP data packets. Identifying and containing these threats presents new difficulties

Therefore, for the sake of safety, in principle, the office network and the network that can be connected to the Internet are not allowed to be connected, but the physical connection between the internal network and the external network may occur under the misoperation of the network administrator.

At this time, the two networks are in different network segments, and it is difficult for users to find that the two networks are connected to each other, forming an illegal boundary.

Images