Routing connection detection method and device, readable storage medium and electronic device

Abstract

The invention relates to a routing connection detection method and device, a readable storage medium and an electronic device. The method comprises the steps of analyzing each of a plurality of data packages sent by a target host in a target time period, so as to determine at least one kind of characteristic information of the target host in each data package, wherein the same kind of characteristic information forms a target characteristic information set; calculating an information entropy of each target characteristic information set; and according to the information entropy, determining whether the target host is routed illegally. Through adoption of the method, on the one hand, whether the target host is routed illegally is determined easily and rapidly; on the other hand, existing intelligent router can simulate a client to authenticate information and modify packet information, as a result, connection of the router cannot be detected, the method solves the above problem, therefore, the routing connection is detected more accurately, and the network information is further protected.

Description

technical field [0001] The present disclosure relates to the field of network security detection, and in particular, to a detection method, device, readable storage medium and electronic equipment for routing connections. Background technique [0002] With the enhancement of network security awareness, various authentication technologies are generally used in the enterprise network to prevent random access of network devices. However, in order to facilitate access to network devices, some users often access multiple unauthenticated network devices through routing devices such as routers after obtaining a privileged IP. Therefore, this poses a great threat to the information security of the enterprise network. [0003] In the prior art, in order to prevent users from illegally connecting to routers within the enterprise network, the following two methods are generally adopted: [0004] 1. Using the client authentication method, the network devices that are allowed to access...

AI Technical Summary

Problems solved by technology

[0006] However, today's smart routers have the functions of simulating the authentication client and tampering with the ID value in the IP field of the message, making it difficult to detect the host connected to the smart router, thus causing hidden dangers to the information security of the enterprise network

Images