Anti-attack method and device, as well as electronic equipment

A technology of anti-attack and front-end equipment, applied in the field of communication, can solve the problems of CPU exhaustion and limited anti-attack capability, and achieve the effect of reducing CPU consumption and reducing the risk of being attacked

Active Publication Date: 2018-08-21
NEW H3C TECH CO LTD
View PDF13 Cites 13 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The vBRAS network element deployed in the form of a virtual machine on a physical server has limited at

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Anti-attack method and device, as well as electronic equipment
  • Anti-attack method and device, as well as electronic equipment
  • Anti-attack method and device, as well as electronic equipment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0039] BRAS (Broadband Remote Access Server, Broadband Remote Access Server) is an access gateway for broadband network applications. PON / xDSL / Cable Modem / High-speed Ethernet technology (LAN) / wireless broadband data access (WLAN), etc.), to realize broadband Internet access for commercial buildings and community residents. vBRAS (virtual BRAS) is a virtualized BRAS, and the BRAS is deployed in a physical server as a virtual machine.

[0040] The operator's MAN has various services such as broadband Internet access, voice, video, and leased line, all of which need to be processed by the BRAS. The vBRAS resource pool composed of vBRAS network elements faces various attacks from the network.

[0041] vBRAS network elements are generally virtual machines deployed on X86 servers. In theory, vBRAS can also implement the attack defense function of BRAS. However, the inventor found that because X86 servers generally do not have a dedicated anti-attack hardware chip, all service packe...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

Embodiments of the invention provide an anti-attack method, an anti-attack device, and a piece of electronic equipment. The method comprises the following steps of: receiving a packet; determining whether the packet hits any one of the stored anti-attack policies; if so, performing an anti-attack process on the packet according to the hit anti-attack policy; otherwise, sending the received packetto the target equipment, so that the target equipment identifies the packet to determine whether the packet is an attack packet; receiving and storing the anti-attack policy returned by the target equipment after determining that the packet is an attack packet. The anti-attack solution provided by the embodiments of the invention performs the anti-attack protection on the vBRAS network element bycombining the pre-equipment, thereby reducing the risk of the vBRAS network element being attacked, and reducing the CPU consumption of the vBRAS network element.

Description

technical field [0001] The present invention relates to the technical field of communications, in particular, to an attack defense method, device and electronic equipment. Background technique [0002] BRAS (Broadband Remote Access Server, Broadband Remote Access Server) is an access gateway for broadband network applications, and is located at the edge layer of the backbone network. vBRAS (virtual BRAS) is a virtualized BRAS, and the BRAS is deployed in a physical server as a virtual machine. According to the inventor's research, it is found that with the continuous development of virtualization, security problems of virtual machines are increasingly exposed. The vBRAS network elements deployed in the form of virtual machines on physical servers have limited attack defense capabilities, and may cause CPU exhaustion when faced with a large number of attack packets. Contents of the invention [0003] In order to overcome the above-mentioned deficiencies in the prior art, ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L12/801H04L12/26
CPCH04L43/0894H04L43/16H04L47/10H04L63/1416H04L63/1441H04L63/1458H04L63/20
Inventor 王伟锋
Owner NEW H3C TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap