Protective method for network attack

Abstract

The invention discloses a protective method of network attack in the CPU network equipment, which comprises the following steps: detecting port report of network equipment; building report form when finding abnormal report; setting ACL access regulation at the port; starting the sampling mechanism; comparing the feature of abnormal report with sampled and reserved report form; cancelling ACL regulation when the abnormal report doesn't exist. The invention can utilize hardware character completely and software control flexibly, which solves defect of attack for hardware and software simply.

Description

technical field [0001] The invention relates to a network attack protection method, in particular to a network attack protection method for a network device with a CPU. Background technique [0002] At present, online attacks are becoming more and more frequent, causing some network equipment such as low-end switch products to have more problems in network use. In order to enhance the anti-attack capability of network equipment, especially low-end Ethernet switch products, and make them have stronger network adaptability, it is necessary to further strengthen the anti-attack performance of network equipment. [0003] The types of network attacks are mainly divided into several types: traffic attacks on the network device CPU, attacks on network protocols, attacks on device table entries, and other attacks. However, DOS attacks, scanning and snooping attacks, and protocol packet attacks are more common on the network at present. These attacks can attack the CPU with a large ...

AI Technical Summary

Problems solved by technology

[0007] The technical problem to be solved by the present invention is to provide a network attack protection method to solve the defects in the above-mentioned prior art that simply use hardware to set ACL rules or software to limit the packet rate for network attack protection.

Images