Gatekeeper-oriented security protection method, device and network system

Abstract

The invention relates to a security protection method, device and network system oriented to a network gatekeeper. The security protection method includes: intercepting a network data packet sent by a network terminal to a network gatekeeper; performing a security check on the network data packet, and judging whether Pass the security check; if yes, send the network data packet after the security check to the gatekeeper; if not, stop the transmission of the network data packet. Implement the technical solution of the present invention, enhance the access control security of the gatekeeper, and do not occupy the computing and storage resources of the gatekeeper, and will not change the original network architecture and deployment mode, and can be directly integrated into the existing network without replacing the gatekeeper ,save costs.

Description

Technical field

[0001] The present invention relates to the field of information security, in particular to a security protection method, device and network system oriented to a gatekeeper.Background technique

[0002] The gatekeeper aims to solve the problems of controllable exchange of information under safe isolation, to realize the ferrying of information between two disconnected networks, and to build a "safe island" for controllable exchange of information. Therefore, it has a wide range of applications in the government, military, electric power and other fields. . At present, the gatekeeper can meet the requirements of internal network users and external file exchange, sending and receiving mail, one-way browsing, database exchange, etc. In the current use environment, the gatekeeper is often used as a network security device, participating in network communication activities as a network security service provider. But in fact, the gatekeeper itself is a security service provider ...

Images