Method and device for treating communication network service

Abstract

This invention discloses a process method for communication network service including: picking up character information initiating service flow, judging if the flow is legal based on the character information , if so, it registers information of said service flow, when the information is the same with the that registered, the flow is transferred. This invention also discloses a process device for communication network service including: a service flow identifying module and a transferring module, in which, the identifying module is used in picking up the character information of newly initiated service flows to judge if said flow is legal, if so, the information is registered, said transfer module is used in receiving service flow and transferring said flow when the information of said service is the same with that of the flow registered by the identifying module.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a communication network service processing method and a communication network service processing device. Background technique [0002] At present, due to the needs of enterprise informatization, almost all enterprise intranets are connected to the Internet. While enjoying the convenience and efficiency brought by the Internet, it also poses some other challenges for enterprises. For example, while using the Internet for work, employees of an enterprise may also engage in some non-work-related activities through the Internet, which will greatly reduce the work efficiency of the enterprise; internal employees may also leak business secrets, pass codes, etc., resulting in Insider Threats to Businesses. For another example, malicious software such as rogue software and spyware are now rampant on the Internet. Some illegal spyware use Internet channels to steal confidential...

AI Technical Summary

Problems solved by technology

[0005] 2. The firewall only opens some ports for external business access;

[0008] But, there is following problem in this method in above-mentioned prior art to carry out enterprise Internet security control, makes firewall useless:

[0009] 1. Many business applications use dynamic ports, and opening all ports will invalidate the business control function;

[0010] 2. Some illegal spyware also use well-known ports, which makes selective open ports invalid for its control;

[0012] 4. More and more malicious applications can bypass the firewall and pose a threat to the internal network security of the enterprise;

[0013] 5. The established channel is easy for malware to exploit and infiltrate

Images