Method and device for network security protection

Abstract

The embodiment of the invention discloses a method and device for network security protection. The method for network security protection comprises the following steps: receiving network attack information reported by a network monitoring device; grouping each attack source according to the regional distribution based on the IP address of each attack source; confirming the nearest network protection device for each group of attack sources respectively based on the locally stored IP addresses of each network protection device; confirming the optimal network protection device of each group of attack sources respectively according to the preset allocation rule based on the data packet business type of each group of attack sources and the nearest network protection device; forwarding the data packets sent by each group of attack sources to the corresponding optimal network protection device; triggering the optimal network protection device to filter the received packets; and sending the filtered data packets to the corresponding customer server. According to the method for network security protection, the broadband of each node of the backbone network and other nodes that are converged is saved, the network congestion is reduced, and the security of the network is improved.

Description

technical field [0001] The present application relates to the field of network security, in particular to a method and device for network protection and security. Background technique [0002] With the development of Internet technologies and popularization of networks, network attacks, such as distributed denial of service (Distributed Denial of Service, DDOS) attacks, are also intensified. Among them, the so-called DDOS attack refers to the use of reasonable service requests to occupy too many service resources, so that the server cannot process the instructions of legitimate users, obtain control of the server, and steal user information, etc., which greatly damages network security. , causing inconvenience to users. [0003] Under the existing technology, the network security protection mainly adopts the following two methods: [0004] The first method is: deploy the anti-DDOS device at the network entrance of the server, and detect the DDOS attack through the network ...

AI Technical Summary

Problems solved by technology

[0006] However, regardless of the first method or the second method, a large number of data packets containing attack data will reach the client server through the backbone network, which will occupy a large amount of bandwidth of the backbone network and other converged nodes, causing serious network congestion

Images