A network isolation device and method

Abstract

The embodiment of the present invention provides a network isolation device and method, including a processor, an output interface, and multiple input interfaces; the network isolation device is connected to the collection device through the input interface, and the network isolation device is connected to the central device through the output interface; multiple The incoming interfaces are isolated from each other; the first incoming interface among the multiple incoming interfaces is used to receive data packets and send the data packets to the processor; the processor is used to detect whether the data packets match the preset filtering rules; if , the data packet is discarded; if not, the data packet is sent to the outbound interface; the outbound interface is used to send the data packet to the central device. It can be seen that the embodiment of the present invention realizes the data isolation of the redundant dual network at the physical level and the logical level, and improves network security.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network isolation device and method. Background technique [0002] In the rail transit safety data network, a redundant dual-network architecture is adopted, and the business networks between the two networks are isolated from each other. When one of the networks fails or is attacked, the business communication between the user and the rail transit safety data network can be automatically switched to another network to complete the work independently, ensuring the normal operation of the signal safety data network and the normal operation of the rail transit. The acquisition equipment collects the data in the redundant dual network separately, and the obtained data needs to be uploaded to the central equipment through the out-of-band network for data analysis and processing. During this process, if the central device is attacked, the central device will become a relay...

AI Technical Summary

Problems solved by technology

That is, after the acquisition device in one network is maliciously hijacked, the malicious code is uploaded to the central device through the out-of-band network, and the central device forwards the malicious code to the other network in the dual network, thereby threatening the other network and breaking The isolation between the two networks has been eliminated, which has greatly increased the network security risk of the rail transit control signal data network

Images