Safety and protection equipment detection method for realizing TCP protocol stack information leakage based on ALG protocol

Abstract

The invention discloses a safety and protection equipment detection method for realizing TCP protocol stack information leakage based on an ALG protocol. The method comprises the following steps thatS1, a client sends a detection message accommodating the ALG protocol stack to a server; S2, the server responds to the detection message, and a response packet of the server responding to the detection message comprises basic information of the detected software and protocol stack information of the safety and protection equipment; and S3, the client receives the response packet. By constructingthe detection message accommodating the protocol stack of the protection equipment, the protection equipment returns corresponding protocol stack information, so that the protection equipment which istransparently deployed is identified, and the purpose of truly identifying the network equipment is achieved.

Description

technical field [0001] The invention relates to the fields of information technology and information security technology, in particular to a security device detection method for realizing information leakage of TCP protocol stack based on ALG protocol. Background technique [0002] As the "fifth frontier" after land, sea, air, and space, cyberspace has become the strategic focus of competition among countries around the world. Our country has become a big country in the network world, and technological waves such as smart cities, digital China, and Internet + are transforming traditional production and living patterns. Network security and informatization are major strategic issues related to national security and national development, as well as to the work and life of the broad masses of the people. The description and identification of cyberspace devices has become one of the basic conditions for governing cyberspace. [0003] Network fingerprint is an important identif...

AI Technical Summary

Problems solved by technology

[0013] 2) Do not respond to messages that request invalid Banner information

[0016] As network security devices such as protective walls, intrusion detection systems, and next-generation firewalls are transparently deployed, the returned banner information is the device behind the protective device. From the perspective of detection, it is impossible to perceive the existence of the protective system.

There are large errors in this detection method, and the detection of network security equipment cannot be accurately located

Images