A matching method and device for matching rules
A matching method and matching device technology, applied in the field of communication, can solve the problems of security gateway equipment performance consumption and long time consumption, and achieve the effects of improving processing performance and processing efficiency, short time consumption, and shortening matching time
Active Publication Date: 2018-11-27
NEW H3C TECH CO LTD
View PDF3 Cites 1 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0005] Since it is necessary to sequentially judge whether the packet matches each matching feature of the matching rule, the judgment process takes a long time
Since the judgment process of each matching feature will consume a large amount of CPU (Central Processing Unit, central processing unit) resources, resulting in performance consumption of the security gateway device
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0019] Aiming at the problems existing in the prior art, an embodiment of the present invention proposes a matching method for matching rules, which can be applied to a security gateway device. Wherein, the security gateway device is generally deployed at a network egress of a large and medium-sized enterprise, an enterprise internal network, or an egress of a data center. The security gateway device can be used to detect messages from the external network accessing the internal network to achieve the purpose of protecting the security of the internal network, and / or to detect messages from the internal network to the external network to control sensitive information of the enterprise .
[0020] Such as figure 1 As shown, the matching method of the matching rule may specifically include the following steps:
[0021] Step 101, when receiving a message, the security gateway device determines the security detection service corresponding to the message.
[0022] In the embodime...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention provides a matching method and a matching device for matching rules. The matching method comprises the steps that: security gateway equipment determines a security detection service corresponding to a message when receiving the message; the security gateway equipment determines a security detection service corresponding to a matching rule; the security gateway equipment determines that the message is not matched to the matching rule if the security detection service corresponding to the message does not include a security detection service identical with the security detection service corresponding to the matching rule; and when the security detection service corresponding to the message include the security detection service identical with the security detection service corresponding to the matching rule, the security gateway equipment determines whether the message is not matched to the matching rule or is matched to the matching rule by utilizing precise matching features included in the matching rule. By adopting the matching method and the matching device, the matching time is shortened, and the processing performance and processing efficiency are improved.
Description
technical field [0001] The present invention relates to the technical field of communication, in particular to a matching method and device for matching rules. Background technique [0002] The security gateway device is generally deployed at the network egress of large and medium-sized enterprises, the enterprise internal network, or the egress of the data center. The network packets are detected to realize the control of sensitive information of enterprises. [0003] For a message passing through the security gateway device, the security gateway device judges whether the message matches a matching rule. If yes, the message is processed based on the security detection service corresponding to the matching rule. [0004] A matching rule usually includes multiple matching features, such as matching feature 1, matching feature 2, and matching feature 3. When judging whether a packet matches a matching rule, it is necessary to sequentially judge whether the packet matches ma...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06
CPCH04L63/0263
Inventor 邹文宇
Owner NEW H3C TECH CO LTD