Network security defense system and network security defense method based on dynamic transformation

Abstract

The present invention proposes a network security defense system and method based on dynamic transformation. The network security defense system includes a communication processing unit, a terminal information unit and a dynamic transformation unit. The communication processing unit configures a terminal for each network terminal in the intranet information table, the terminal information table includes the real IP address assigned to the network terminal, the virtual IP address and the external network access IP address, the dynamic transformation unit dynamically transforms the virtual IP address, and the communication processing unit enables the network terminals in the internal network to use vIP for communication, and wIP for communication between network terminals in the internal network and the external network. The present invention breaks the static characteristics of the traditional intranet, and dynamically transforms the IP address information of the network terminal in the intranet, so that the attacker cannot obtain the topological structure of the intranet, and cannot accurately obtain the real information of the network terminal in the intranet, thereby effectively defending against Intranet attacks are prevented and the security of the intranet is improved.

Description

technical field [0001] The invention relates to the field of network security, in particular to a network security defense system and a network security defense method based on dynamic transformation. Background technique [0002] Intranet security is very important in the actual network environment, but it is ignored by most network security devices. Existing methods generally detect attack behaviors by collecting traffic, but abnormal traffic is often generated after the attack behavior, so such methods cannot provide real-time defense against the attack behavior. Another method is to deploy a network security defense system on hosts connected to the network. Although it can defend against some attacks, it cannot defend against unknown intranet attacks. Static IP address assignments allow attackers to accurately and quickly target attacks by scanning local or remote networks. Determining the IP address of the active host in the target network is the first step in most at...

AI Technical Summary

Problems solved by technology

However, due to the static nature of the existing network topology information, attackers often have sufficient time to analyze the intranet architecture and network address information, thereby gradually infiltrating the intranet and reaching the attack target

Images