Network port security-based micro-isolation system

Abstract

The invention belongs to the field of network security, and particularly discloses a network port security-based micro-isolation system, which comprises a micro-isolation system and a micro-isolation plug-in, and is characterized in that the micro-isolation plug-in is installed on a host machine or a physical host and has a timing check task; the micro-isolation system issues an instruction to the micro-isolation plug-in installed on the host machine or the physical host, the micro-isolation plug-in controls a certain port on the host machine by controlling the software firewall, only opens a specified IP address and monitors the external IP addresses of the current host machine and the virtual machine in the host machine, and then the micro-isolation effect is achieved. The problem of IP address drift of the virtual machine is solved by installing a micro-isolation plug-in, adding a timed task and monitoring external IP addresses of the current host machine and the virtual machine in the host machine, and the illegal port access behavior is isolated and blocked in real time by using a micro-isolation system, so that attack risk diffusion in network service is effectively avoided, therefore, the aim of isolating according to the threat area is fulfilled.

Description

technical field

[0001] The invention relates to the field of network security, in particular to a micro-isolation system based on network port security. Background technique

[0002] With the rapid development of cloud computing and virtualization technologies, more and more enterprises are migrating data and services to multiple data center environments spanning physical machines, public clouds, private clouds, and hybrid clouds. When the attacker has the opportunity to get a springboard machine on the intranet, it turns out that the intranet network is basically unimpeded. Traditional firewalls, WAFs, IPS and other endpoint security and network security methods are stretched in the cloud environment.

[0003] Network-oriented micro-isolation control, through comprehensive and detailed visual analysis of network internal traffic, monitoring network port activities, and based on fine-grained security access policies, it helps users quickly and easily realize isolation of dif...

Examples

Embodiment

[0040] Example: The specific micro-isolation implementation process is as follows:

[0041] S1. Through the micro-isolation system, issue isolation instructions to the micro-isolation plug-in of the host (such as image 3 shown);

[0042] S2. The micro-isolation plug-in receives the instruction, executes the isolation, and returns the result (such as Figure 4 shown); specifically, through the following steps:

[0043] S21. Install the micro-isolation plug-in on each host computer, and broadcast instructions from the micro-isolation system to all micro-isolation plug-ins;

[0044] S22, the micro-isolation plug-in, compares whether the server IP address in the instruction is consistent with the external IP address of the server local machine and the internal virtual machine, thereby judging whether the isolation instruction should be executed at the local firewall;

[0045] S23. After it is determined that it needs to be executed, execute the isolation instruction;

[0046]...

technical field

[0001] The invention relates to the field of network security, in particular to a micro-isolation system based on network port security. Background technique

[0002] With the rapid development of cloud computing and virtualization technologies, more and more enterprises are migrating data and services to multiple data center environments spanning physical machines, public clouds, private clouds, and hybrid clouds. When the attacker has the opportunity to get a springboard machine on the intranet, it turns out that the intranet network is basically unimpeded. Traditional firewalls, WAFs, IPS and other endpoint security and network security methods are stretched in the cloud environment.

[0003] Network-oriented micro-isolation control, through comprehensive and detailed visual analysis of network internal traffic, monitoring network port activities, and based on fine-grained security access policies, it helps users quickly and easily realize isolation of dif...

Examples

Embodiment

[0040] Example: The specific micro-isolation implementation process is as follows:

[0041] S1. Through the micro-isolation system, issue isolation instructions to the micro-isolation plug-in of the host (such as image 3 shown);

[0042] S2. The micro-isolation plug-in receives the instruction, executes the isolation, and returns the result (such as Figure 4 shown); specifically, through the following steps:

[0043] S21. Install the micro-isolation plug-in on each host computer, and broadcast instructions from the micro-isolation system to all micro-isolation plug-ins;

[0044] S22, the micro-isolation plug-in, compares whether the server IP address in the instruction is consistent with the external IP address of the server local machine and the internal virtual machine, thereby judging whether the isolation instruction should be executed at the local firewall;

[0045] S23. After it is determined that it needs to be executed, execute the isolation instruction;

[0046]...

Images