A firewall device self-protection apparatus and a processing method of a protection strategy thereof

Abstract

The application discloses a firewall device self-protection device and a processing method of a protection strategy thereof, and relates to the technical field of network security. The device comprises a monitoring module, a statistical module and a calculation module. The monitoring module is responsible for real-time monitoring of the running state of the CPU of the firewall device and transmitting the running state to the calculation module. The statistical module is responsible for the statistics of the traffic entering the firewall device, the calculation of the rate thereof, and the sequencing of the protocol message. The calculation module is responsible for judging whether to punish or recover the attack traffic according to the monitored running state, screening the attack traffic according to the statistical data, and calculating the rate value of the corresponding traffic punishment speed limit or recovery. The implementation module is responsible for punishing or recovering the attack traffic according to the calculated rate value. The application can effectively solve the defects in the prior art, can accurately and effectively punish the attack traffic while protecting the normal operation of the CPU of the device, can maintain the safety of the firewall device itself, and can guarantee the normal operation of the network system.

Images