Network security protecting system and method

Abstract

A network safety protection system and method, which contains attestation server for network accessing attestation and determining whether user accessing, security policy server for configuring and transmitting security policy, judging whether user is safety user or not and sending judgment result to attestation server, broadband access server for user network accessing, receiving security policy and monitoring message accessing user network, sending monitoring information to security policy server to judge user security, said invention can refuse non safety user to access network. Said invention also discloses network safety protection method.

Description

technical field [0001] The invention relates to security technology in the field of computer or communication, in particular to a network security protection system and method. Background technique [0002] With the popularization and deepening of computer networks, especially the Internet (INTERNET) in the world, the vigorous promotion and application of enterprise networks in securities departments, banking systems, enterprises and institutions has made more and more people contact and use the Internet. Trade activities can be carried out through the network, and mail transmission can also be carried out, but at the same time, the number of viruses is also rapidly doubling along with the network, and many viruses that are almost extinct also occur from time to time. It's super fast. While vigorously developing the network, viruses have also been greatly developed. Some viruses in the network are benign, do not do any damage, and only affect the normal operation of the sy...

AI Technical Summary

Problems solved by technology

[0003] In addition, there are more and more network attacks on the network, which have a great impact on broadband access servers. Often, an attack by one user will cause other users in the same area to be unable to access the network normally, which will bring great harm to telecom operators. troubled

[0004] The existing method of killing viruses is still to download patches and antivirus software. However, there are thousands of machines in a broadband metropolitan area network. As long as one machine is not antivirus and patched in time, it will affect the entire network, and even cause the entire network to fail. Internet Repeated Poisoning

[0005] Therefore, generally speaking, the existing methods do not solve the problem of network virus isolation and repeated infection well, and users need to frequently update antivirus software and system patches, which increases the complexity of user operations

Images