Dual monitoring security control method and system

Abstract

The invention discloses a dual monitoring security control method and system. The system comprises a small firewall device and an integrated traffic analysis device, wherein the small firewall devicecomprises a switching unit and a central processing unit. The switching unit directly forwards a basic data packet in a service network, and copies the suspicious data packet to the central processingunit; the central processing unit compares the data packet with a locally preset database, and sends a data message that is not matched with the locally preset database to the integrated traffic analysis device, and issues an access control list to the switching unit to perform safety control; the integrated traffic analysis device receives the uploaded data packet, compares the data packet withthe locally preset database, and issues the corresponding access control list to the switching unit for safety control. According to the dual monitoring security control method and system, the trafficpassing through the small firewall device is dually monitored, which is safe and reliable; and even if the CPU of the small firewall device fails, the communication of the normal service flow is notaffected.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a dual monitoring security control method and system. Background technique [0002] With the development of Internet technology, the network has extended to thousands of households, and network security is becoming more and more important. In particular, servers in some networks have heavy access traffic and are particularly vulnerable to attacks, thus causing damage to the entire network. [0003] In order to prevent attacks, in many large-scale professional networks, such as video surveillance networks, a small firewall device will be added in front of the surveillance service server to perform traffic filtering based on whitelists. A typical approach is to initially only release the registration channel, and the terminal can perform normal registration. After the server approves the registration, it notifies the small firewall device to release the subseq...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a double monitoring safety control method and system, which is used to solve the technical problem that the instability of the CPU in the prior art can easily cause the channel to be paralyzed and affect the business communication

Images