Active detection method for various network interconnections based on ICMP protocol

Abstract

The invention discloses an active detection method for various network interconnections based on an ICMP protocol. The method is characterized in that a way of sending a forged ICMP detection data packet to an internal and external network interconnection device capable of simultaneously accessing internal and external networks is utilized to detect whether the internal and external network interconnection device is simultaneously connected to the internal and external networks to realize active detection of network interconnections; once the internal and external networks simultaneously accesses the internal and external networks, after the internal and external network interconnection device receives the forged ICMP detection data packet, the internal and external network interconnection device sends a matched ICMP response data packet; after an external connection server parses an ICMP data part in the ICMP response data packet, a written target address in the ICMP data part can be analyzed; and the internal and external network interconnection device capable of simultaneously accessing the internal and external networks can be obtained and positioned through the target address; and if the internal and external network interconnection device is only connected to the internal network and is not connected to the external network, after the internal and external network interconnection device receives the forged ICMP detection data packet, the forged ICMP detection data packet cannot be sent to the external connection server, namely the internal and external network interconnection device is not connected to the external network.

Description

【Technical field】 [0001] The invention relates to the technical field of network security supervision, in particular to an active detection method for multiple network interconnections based on the ICMP protocol. 【Background technique】 [0002] Network interconnection is to connect two or more communication networks through a certain method, so that users in different networks can communicate with each other. In a company or government department that only allows communication in the internal network, when someone accesses the external network through some means, resulting in the intercommunication of the two networks, it is easy to cause the internal network to attract attacks from the external network and lose the internal network. security. Therefore, detecting the network interconnection and finding out the interconnection points can effectively protect the security of the intranet. At present, the more internal and external network interconnection methods are realized...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to overcome the deficiencies of the above-mentioned prior art, and provide a kind of active detection method based on ICMP protocol for multiple network interconnections, which aims to solve the problem that the internal network is easily recruited to the external network when the internal and external networks communicate with each other in the prior art. network attacks, and the technical problems of losing the security of the internal network

Images