A comprehensive monitoring system and method for illegal outreach

Abstract

The invention discloses an illegal outreach comprehensive monitoring system and a method thereof. The system mainly includes an internal network support guarantee platform, a monitoring client service module, and an external network detector; in the method, the monitoring client service module and the external network detector are used With the illegal outreach monitoring technology, real-time monitoring of the illegal outreach behavior of intranet computers can be completely unaffected by the way of accessing the Internet; the method of monitoring IP address and MAC address modification solves the problem of users modifying IP and MAC addresses Access to the Internet leads to inaccurate alarm information; the use of master-slave process protection technology prevents intranet users from shutting down the process of monitoring the client service module, effectively avoiding behaviors that evade monitoring and illegal access to the Internet.

Description

technical field [0001] The invention relates to the field of computer network information security, in particular to a system and method for preventing illegal outreach of intranet computers. Background technique [0002] At present, the daily office work of party and government agencies, military departments, and enterprises has introduced an information-based and networked office model. In order to ensure the effectiveness and security of information sharing at the same time, these departments have established their own internal networks, using physical isolation from the Internet to prevent information leakage and block attacks from the Internet. However, due to reasons such as low security awareness of intranet users and lax implementation of the management system, it often happens that intranet users intentionally or unintentionally conduct illegal outreach, such as connecting to the Internet through a wireless network card through Wifi, using a USB network card to acce...

AI Technical Summary

Problems solved by technology

Intranet sending packet detection mode cannot monitor off-network and outreach behaviors

The program structure of the currently public client monitoring solution is relatively complex, the real-time performance is weak, and it cannot solve the problem of external connection after bypassing the monitoring by modifying the IP address, MAC address and closing the monitoring client.

Images