Router threat perception method and system

Abstract

The invention provides a router threat perception method and system. The method comprises the following steps that: the threat perception system is consistent with the input of a monitored router; theoutput data of the monitored router is sent to the threat perception system at the same time; wherein the configuration information of the monitored router needs to be synchronously configured to thethreat perception system; and the state information of the monitored router needs to be timely collected to the threat perception system. The output data and state of the monitored router are compared with the output data and state of the threat sensing system, if the output data or state of the monitored router is inconsistent with the output data or state of the threat sensing system, the monitored router may have a threat, and alarm information is sent to a management system. The threat perception system comprises an input processing unit, a function equivalent actuator unit, a state comparison unit, an output comparison unit and an analysis alarm unit. According to the method, the problem of high difficulty in judging router threats caused by various vulnerability and attack technicalmeans can be solved, and unknown vulnerabilities and zero-day attacks can be perceived.

Description

technical field [0001] The present invention relates to the technical field of network information security, in particular to a router threat perception method and system. Background technique [0002] As the basic core element of cyberspace, routers are located at the bottom layer of cyberspace, interconnecting multiple heterogeneous networks, and realizing end-to-end network intercommunication through route lookup and data forwarding. As the core equipment of cyberspace information infrastructure, it covers the core layer, convergence layer and access layer of the entire Internet. Due to its complexity and intelligence, it has become one of the main targets of network security attacks, and its security directly affects or even restricts the security of cyberspace. Since the router is in the basic position in the network, once its vulnerabilities and backdoors are exploited, it will cause immeasurable harm. This is not only related to the security of the router itself, but...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem of lack of router threat perception means for unknown loopholes and zero-day attacks, the present invention provides a new router threat perception method and system, which uses the behavior and status of the router after being controlled as the basis for judgment, and detects the threat of the router. perception

Images