Firewall control method and system based on user service system

Abstract

The invention discloses a firewall control method and system based on a user service system. The method comprises the steps of receiving network request information which is sent by a client and comprises a service system identifier and service system network information; matching the service system identifier with the service system identifiers in preset service security access control strategies; detecting whether network connection matching with the service system network information exists in established network connection of a first service security access control strategy or not when the matched service system identifier is found in the first service security access control strategy; establishing a service security access control sub strategy for finishing the operation instruction according to a detection result and a corresponding operation instruction in the first service security access control strategy; and processing a message transmitted to a firewall by the service system based on the service security access control sub strategy. Through application of the scheme of the method and the system, security access control of a firewall level based on the user service system can be realized, and the user security management usability can be improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a firewall control method and system based on a user service system. Background technique [0002] The rapid development of Internet technology and the characteristics of convenient use have made it one of the most extensive platforms for people to exchange work and life information. At the same time, it also exposes user information to the risk of being attacked and stolen. [0003] The traditional firewall / security gateway can complete the access control of the 3-4 layer network, but it is difficult to form an effective protection of the 7 layer, that is, the network application layer. Currently widely discussed next-generation firewalls, application firewalls, NGFW, UTM, and online behavior management products can identify specific applications and protect them through deep application network protocol analysis (DPI). [0004] In real work, there are multiple business syst...

AI Technical Summary

Problems solved by technology

However, this invention is also based on the matching analysis of the network packets being transmitted in the network that arrive at the firewall, and identifies the application protocol or application signaling, so as to process the network packets according to the requirements of the security level. If the packets of the two business systems If the protocol is the same, it is impossible to do different control

Images