Method for intelligently finding and locating address translation equipment

Abstract

The invention discloses a method for intelligently finding and locating address translation equipment. Monitoring equipment hardware bypasses on a core switch of a management and control network; a core monitoring program, a data analyzing program and an equipment scanning program are embedded in the monitoring equipment hardware; the core monitoring program is used for mirroring all communication data packets passing through the core switch to a local server in real time; the data analyzing program is used for unpacking the communication data packets mirrored to the local server, acquiring characteristic information and analyzing the IP address of suspicious NET equipment; and the equipment scanning program is used for independently scanning the suspicious NET equipment and directly obtaining information of the suspicious NET equipment. The method for intelligently finding and locating the address translation equipment disclosed by the invention has the function of independently finding the NET equipment; by means of characteristic modelling analysis and a similarity weighted algorithm, the high-efficiency controllability and the manageability of a network boundary can be realized; the network stability is improved; and the information security in a special network environment can be enhanced.

Description

【Technical field】 [0001] The invention relates to the technical field of special network border management and control, in particular to a method for intelligently discovering and locating address conversion equipment. 【Background technique】 [0002] With the in-depth development of network applications and technological progress, network security threats such as illegal access, malicious attacks, and virus transmission are becoming more and more serious. In a private network environment with larger scale and more complex structure, many users privately connect terminal computers to the management and control network through address translation devices (NET devices) in order to facilitate device access or avoid supervision, and Unauthorized access to internal network resources. However, the current network monitoring and management methods cannot detect such access behaviors in a timely and effective manner, let alone locate and control the connected terminal devices, and s...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to overcome the deficiencies of the above-mentioned prior art, and provide a method for intelligently discovering and locating address translation equipment, which aims to solve the problem of private network-in-network and unauthorized equipment access by NET equipment in the prior art, private network Technical issues of poor controllability and manageability of borders

Images