Illegal external connection detection device and method and storage medium

Abstract

The invention discloses illegal external connection detection device and method and a storage medium, and belongs to the field of network security. According to the embodiment of the invention, wired network flow and wireless network flow of equipment to be detected are acquired in real time through at least one network card, acquired flow data are analyzed through a processor to obtain current network connection information, detection is carried out based on a preset white list, and whether illegal external connection events exist in the current equipment to be detected is judged; the functions are integrated on an illegal external connection detection device. The to-be-detected equipment and the network can be quickly sampled without being arranged in advance, the portability of the illegal external connection detection equipment is improved, the wired network and wireless network flow of the to-be-detected equipment is acquired and analyzed, and the comprehensive detection of the illegal external connection condition of the to-be-detected equipment is realized.

Description

technical field [0001] The invention relates to the field of network security, in particular to an illegal outreach detection device, method and storage medium. Background technique [0002] With the increasing demand for network usage by various companies, enterprises, and government departments, network security issues have received more and more attention. At the same time, the national policy puts forward relevant requirements for the network security level of the industrial control system. One of the compliance requirements of the production control area where the industrial control system of the enterprise is located is to implement regional isolation and protection, and illegal outreach is not allowed. Therefore, in the network security inspection of these enterprises and companies, the detection of illegal outreach is a necessary link. [0003] There are several common cases of illegal outreach in the enterprise industrial control system network: [0004] ① The net...

AI Technical Summary

Problems solved by technology

[0008] Embodiments of the present invention provide an illegal outreach detection device, method, computer equipment, and storage media, which can solve the defects of poor portability, insufficient comprehensiveness, and unfavorable quick spot checks of the illegal outreach detection device. The technical solution is as follows:

Images