Decentralized safety guarantee method and device for packet full life cycle

Abstract

The invention discloses a decentralized security assurance method and device for a packet full life cycle, and the method comprises the steps: carrying out the authenticity verification of a source address and an identity of a data packet group through a distributed network node after the data packet group is generated at a communication source end; in the network forwarding process of the data packet groups, performing collaborative sampling and detection on the data packet groups through the distributed network nodes, and performing credibility verification on related routing behaviors; after the data packet group arrives at the destination end, verifying and filtering the legality of the data packet group through the destination end. According to the method, a decentralized informationmonitoring and intelligent detection technology is utilized; according to the method, the safety of the data packet groups in the whole life cycle of 'source end generation-midway forwarding-destination end receiving' is ensured, the technology has the advantages of high flexibility, strong adaptability, decentralization, robustness and the like, and the safety and credibility of the whole networksystem are ensured while the calculation overhead and the storage overhead are both considered.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a decentralized security guarantee method and device for the whole life cycle of grouping. Background technique [0002] In recent years, network security has gradually become an important part of national security. The phrase "there is no national security without network security" is enough to reflect the importance of network security. Nevertheless, network attacks still occur every second. The reason is that the network system lacks security and trustworthiness at the beginning of design, which makes the existing Internet system extremely vulnerable to network attacks. . [0003] From the perspective of the stage of data packet grouping, the current network attacks mainly occur in three positions of the network communication system: first, the communication source end, that is, the authenticity of the data packet grouping at the source end is difficult to be guarant...

AI Technical Summary

Problems solved by technology

These schemes lack the consideration of the whole life cycle of data packet grouping, resulting in an embarrassing situation that cannot be prevented.

At the same time, security solutions based on centralized management and control (such as SDN technology) can easily implement security verification and guarantee for the entire life cycle of packets, but there are still problems such as single point of failure and misconfiguration, which make this type of security solution There are still great risks

Images