Depth defense system for effectively responding to APT (Advanced Persistent Threat) attacks

Abstract

The invention relates to a depth defense system for effectively responding to APT (Advanced Persistent Threat) attacks. The depth defense system comprises an Internet access area, a DMZ area, a core application area, a DB area, a data area, and a management area; the DMZ area is connected with the Internet access area; the core application area is connected with the Internet access area; the DB area is respectively connected with the DMZ area and the core application area; and the management area is respectively connected with the Internet access area, the DMZ area, the core application area and the DB area. The depth defense system provided by the invention adopts a deep network structure, which reduces the number of regional firewalls, reduces the equipment cost, shares the load to various hierarchical networks, realizes the function of releasing the pressure of a core switch, and improves the service life of the switch; besides, the division of functional modules is realized, and the controllability of each functional module is improved; and all functional sub-networks are of the closed loop design, and the security of the system is improved.

Description

technical field [0001] The invention belongs to the technical field of computer network topology, and in particular relates to an in-depth defense system that effectively responds to APT attacks. Background technique [0002] The most important topological structures of computer networks are bus topology, ring topology, tree topology, star topology, hybrid topology and mesh topology. Among them, ring topology, star topology, and bus topology are the three most basic topological structures. In the local area network, the most used is the star structure. Other topologies are basically not used anymore and so are not discussed further. [0003] The star topology has the following disadvantages: (1) The cable length and installation workload are considerable; (2) The burden on the central node is heavy, forming a bottleneck; failure of the central node will lead to the paralysis of the network; (3) The distribution of each site The processing capability is low; (4) The networ...

AI Technical Summary

Problems solved by technology

[0003] The star topology has the following disadvantages: (1) The cable length and installation workload are considerable; (2) The burden on the central node is heavy, forming a bottleneck; failure of the central node will lead to the paralysis of the network; (3) The distribution of each site The processing capacity is low; (4) The network sharing capacity is poor, and the utilization rate of communication lines is not high

The star architecture network has multiple data flows on a single link, the ACL design is more complicated, and the CPU calculation pressure is too high

High-risk services such as SSH run in the service network. A slight human error or excessive switch load cancels part of the ACL control and loses security.

Images