Network integration depth detection device and method based on rack switch equipment

Abstract

The invention discloses a network integration depth detection device and method based on rack switch equipment. The device comprises a main control board, a switch board, a data service board, a safety protection board and a backboard for interconnecting data communication among the main control board, the switch board, the data service board and the safety protection board. The method optimizes the traditional low-efficiency processing concept of deploying the data security detection equipment at the key position of the network to detect and process the network service by adopting an overlapped deployment mode, adopts a brand new network communication equipment embedded security protection integrated design idea, and considers security detection and data forwarding requirements; and a safety protection module and data exchange equipment are integrally designed; a safety protection system is built in the equipment, a high-speed backboard communication channel of original rack equipment is matched, and a high-performance multi-core engine parallel deep detection technology is carried, so that rapid deep safety detection and forwarding processing of data packets are realized.

Description

technical field [0001] The invention relates to the technical field of network protection, in particular to a network integration depth detection device and method based on rack switch equipment. Background technique [0002] As the scale of the current communication network continues to expand, intrusions against the network and computer systems are gradually increasing. As an important part of network protection, security monitoring and early warning can effectively reduce the degree of threat damage because it can detect threats in time and issue alarms in advance. It can even nip threats in their infancy, so early warning of cyberspace security has attracted much attention. For traditional switch devices, including rack-mounted switches, traditional network operation and maintenance methods such as SNMP, CLI, SYSLOG, and third-party packet capture tool analysis are mostly used for network traffic security protection. The fixed fields of L2-L4 carry out the filtering and...

AI Technical Summary

Problems solved by technology

[0003] The current technical solution, traditional network operation and maintenance methods such as SNMP, CLI, SYSLOG, and third-party packet capture tool analysis cannot track network status information in real time, lack of rapid collection of network status and timely optimization of network traffic for corresponding scenarios, and this method It is a passive network protection method and cannot respond quickly to network intrusions and attacks in a timely manner

[0004] Furthermore, the ACL access control policy technology based on L2-L4 fixed fields for data packet filtering and screening is relatively simple in protection mode, and the protection granularity is relatively coarse. It cannot resist new network threats at all, and cannot meet the requirements of some complex networks. Requirements for refinement and intelligent detection of data in the environment

[0005] Based on the above security considerations, although there is currently a new protection system that superimposes a special security detection and filtering system on the general network architecture to perform independent in-depth filtering and detection of data, this method uses switching network equipment and security detection under the traditional network architecture. In the separated and superimposed deployment of filtering devices, the configuration of security protection policies and the scheduling of network traffic exchange are independent of each other, which cannot be effectively unified and linked, and all network traffic needs to be uniformly handed over to the security detection and filtering devices for summary analysis, performance and effectiveness. Unable to guarantee, thus hindering the improvement of dynamic defense effectiveness

Images