Ship-shore network security intelligent defense system and method
By introducing a route backtracking module and a virtual network terminal into the ship network, combined with a firewall, a three-dimensional defense system combining proactive and passive measures is formed, solving the problem of insufficient ship network security and enabling timely detection and prevention of viruses.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-26
- Publication Date
- 2026-03-13
AI Technical Summary
In existing technologies, ship network security relies on a single firewall defense method, which cannot effectively deal with virus attacks, resulting in insufficient network security. Especially when wireless network bandwidth is limited and wireless connection is unstable, virus intrusions cannot be detected and repaired in a timely manner.
The network security system, composed of a firewall, a route backtracking module, and a virtual network terminal, proactively analyzes abnormal routes and cuts off the source of viruses through the route backtracking module, sets traps to capture viruses through the virtual network terminal, and combines the firewall to block known viruses, forming a three-dimensional defense system that combines proactive and passive measures.
It enables proactive defense of ship networks, timely detection and cut-off of virus sources, improves the security and protection capabilities of ship networks, and avoids system problems caused by virus intrusion.
Smart Images
Figure CN121665240A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to an intelligent defense system and method for ship-shore network security, belonging to the field of ship network security defense technology. Background Technology
[0002] Today, ship digital networks (hereinafter referred to as ship networks) are widely used. They are characterized by small network size and limited installation space. The connection channel between the ship network and the Internet is only a wireless channel with limited bandwidth. However, the requirements for ship network security are the same as those for land network security. When a ship is sailing or anchored at sea, the wireless network channel is much smaller than that on shore, and the protection and support for network security is much lower than that of land networks. Once ship network security fails, it will cause great economic losses and security risks to the ship and users.
[0003] To address ship network security issues, ship networks are generally equipped with firewalls. However, firewalls alone are clearly insufficient to guarantee the protection of ship networks from virus attacks. Viruses are constantly evolving and mutating, and firewalls are a passive defense mechanism. Once a virus breaches a ship's network, it can cause systemic problems. Currently, no effective defense method has been developed, and this remains to be addressed. Summary of the Invention
[0004] The purpose of this invention is to provide a ship-shore network security intelligent defense system and method, which improves the defense capability against virus intrusion into ship networks and ensures the security of ship networks.
[0005] To achieve the above objectives, the present invention adopts the following technical solution:
[0006] A ship-to-shore network security intelligent defense system includes a firewall, a routing backtracking module, and a virtual network terminal. The firewall is located between the ship's wireless communication network and a core switch. The ship's wireless communication network is used for wireless communication with the shore-based Internet. The routing backtracking module is connected to the core switch. The virtual network terminal is connected to the core switch through a network server. The core switch is connected to each network terminal device through a wired / wireless terminal connection network.
[0007] The network terminal equipment includes cameras, digital terminal equipment, and IPTV.
[0008] A ship-shore network security intelligent defense method based on the aforementioned ship-shore network security intelligent defense system includes the following steps:
[0009] 1) During the information exchange between the ship's wireless communication network and the shore-based Internet, when the exchange information enters the ship's network through the firewall, the firewall intercepts and defends against known viruses, while the exchange information of undetected new viruses enters the core switch.
[0010] 2) The routing backtracking module continuously analyzes and records all routes executed on the core switch: when an abnormal route is detected, an alarm is issued, the source of the virus is found and cut off, and the source is sent to the virus database of the firewall to prevent subsequent intrusion; otherwise, step 2) is repeated.
[0011] 3) The virtual network terminal used to simulate network terminal equipment in the ship network continuously checks whether data is entering: if so, it is determined that a virus has invaded, the routing backtracking module is activated to find the source of the virus and cut it off, and at the same time, this source is sent to the virus database of the firewall to prevent subsequent intrusions; otherwise, step 3 is repeated.
[0012] In actual implementation, steps 2) and 3) are executed simultaneously.
[0013] The advantages of this invention are:
[0014] This invention designs a network security defense system specifically for ship networks, consisting of a firewall, a route backtracking module, and virtual network terminals. In addition to firewall measures, this invention adds two more measures: route backtracking analysis and virus trap capture. This transforms ship network security from a simple passive defense based on a single firewall to a three-dimensional defense combining passive and active approaches. It solves the network security problem caused by the ship network's inability to detect the presence of a virus once it has breached the firewall, achieving the goal of proactively discovering problems and automatically patching them, thus improving the security protection capabilities of ship networks. Attached Figure Description
[0015] Figure 1 This is a schematic diagram of the composition of the ship-shore network security intelligent defense system of the present invention. Detailed Implementation
[0016] like Figure 1 As shown, this invention proposes a ship-shore network security intelligent defense system, including a firewall 10, a route backtracking module 20, and a virtual network terminal 30. The firewall 10 is set between the ship's wireless communication network 70 and the core switch 40. The ship's wireless communication network 70 is used to communicate wirelessly with the shore-based Internet 60. The route backtracking module 20 is connected to the core switch 40. The virtual network terminal 30 is connected to the core switch 40 through a network server 50. The core switch 40 is connected to each network terminal device through a terminal wired / wireless connection network 80.
[0017] In this invention, the network server 50 and the core switch 40 are existing devices in the art, and the terminal wired / wireless connection network 80 is a well-known technology in the art, such as using an optical line terminal (OLT), etc., and is not limited thereto.
[0018] In practical applications, network terminal devices such as cameras 91, digital terminal devices 92, and IPTV (interactive network television) 93 are not limited.
[0019] In this invention, firewall 10 is used to prevent known viruses from entering the ship's network.
[0020] In this invention, the route backtracking module 20 is used to proactively and continuously analyze all routes executed on the core switch 40, detect abnormal routes to identify the source of the virus, and promptly cut it off to prevent subsequent intrusions. The virtual network terminal 30 is used to simulate network terminal equipment in the ship network, serving as bait for network viruses. When a virus intrusion is detected, the route backtracking module 20 is activated to perform route backtracking, identify the source of the virus, and promptly cut it off to prevent subsequent intrusions.
[0021] Specifically, for new viruses that have mutated and could potentially breach firewall 10 and enter the ship's network, such as Figure 1 This invention adds two preventative measures. One is that the routing backtracking module 20 continuously analyzes and evaluates internal and external network routes. Once an abnormal transmission path is detected, an alarm is issued, the source of the virus is identified and promptly cut off, and the source is simultaneously sent to the firewall 10 to prevent further intrusion. The other is that a virtual network terminal 30 is added to the ship's network to set traps for virus capture. When data enters the virtual network terminal 30, it is determined that a virus intrusion has occurred, triggering the routing backtracking module 20 to identify and promptly cut off the source of the virus, and simultaneously sending the source to the firewall 10 to prevent further intrusion.
[0022] As can be seen, the network security defense system designed in this invention starts with several preventive measures, including the time of virus entry, routing analysis after entry, and setting traps to capture viruses. It effectively prevents viruses from entering and damaging the ship network, transforming the existing simple passive defense based solely on firewalls into a three-dimensional defense method that combines passive and active approaches. Compared with the single firewall approach, this defense method significantly enhances the security of the ship network.
[0023] Based on the above-described ship-to-shore network security intelligent defense system of the present invention, the present invention also proposes a ship-to-shore network security intelligent defense method, comprising the following steps:
[0024] 1) During the information exchange between the ship's wireless communication network 70 and the shore-based Internet 60, when the exchange information enters the ship's network through the firewall 10, the firewall 10 intercepts and defends against known viruses, while the exchange information of undetected new viruses enters the core switch 40.
[0025] 2) The routing backtracking module 20 continuously analyzes and records all routes executed on the core switch 40: when an abnormal route is found, an alarm is issued, and the network administrator intervenes manually to manage it, find the source of the virus and cut it off. At the same time, this source is sent to the virus database of the firewall 10 to prevent subsequent intrusions and achieve interception and defense against new viruses. Otherwise, step 2) is repeated.
[0026] 3) The virtual network terminal 30, used to simulate network terminal equipment in the ship network, continuously checks whether data is entering. If so, it is determined that a virus has invaded, and the route backtracking module 20 is activated to find the source of the virus and cut it off. At the same time, this source is sent to the virus database of the firewall 10 to prevent subsequent intrusions, thereby achieving the interception and defense against new viruses. Otherwise, step 3 is repeated.
[0027] In practice, steps 2) and 3) are executed simultaneously.
[0028] The advantages of this invention are:
[0029] This invention designs a network security defense system specifically for ship networks, consisting of a firewall, a route backtracking module, and virtual network terminals. In addition to firewall measures, this invention adds two more measures: route backtracking analysis and virus trap capture. This transforms ship network security from a simple passive defense based on a single firewall to a three-dimensional defense combining passive and active approaches. It solves the network security problem caused by the ship network's inability to detect the presence of a virus once it has breached the firewall, achieving the goal of proactively discovering problems and automatically patching them, thus improving the security protection capabilities of ship networks.
[0030] The above description describes the preferred embodiments of the present invention and the technical principles applied thereto. For those skilled in the art, any obvious changes such as equivalent transformations or simple substitutions based on the technical solutions of the present invention, without departing from the spirit and scope of the present invention, shall fall within the protection scope of the present invention.
Claims
1. A ship-to-shore network security intelligent defense system, characterized in that, The system includes a firewall, a routing backtracking module, and virtual network terminals. The firewall is located between the ship's wireless communication network and the core switch. The ship's wireless communication network is used to communicate wirelessly with the shore-based Internet. The routing backtracking module is connected to the core switch. The virtual network terminals are connected to the core switch through a network server. The core switch is connected to each network terminal device through a wired / wireless terminal connection network.
2. The ship-to-shore network security intelligent defense system as described in claim 1, characterized in that, The network terminal equipment includes cameras, digital terminal equipment, and IPTV.
3. A ship-shore network security intelligent defense method based on the ship-shore network security intelligent defense system described in claim 1, characterized in that, Including the following steps: 1) During the information exchange between the ship's wireless communication network and the shore-based Internet, when the exchange information enters the ship's network through the firewall, the firewall intercepts and defends against known viruses, while the exchange information of undetected new viruses enters the core switch. 2) The routing backtracking module continuously analyzes and records all routes executed on the core switch: when an abnormal route is detected, an alarm is issued, the source of the virus is found and cut off, and the source is sent to the virus database of the firewall to prevent subsequent intrusion; otherwise, step 2) is repeated. 3) The virtual network terminal used to simulate network terminal equipment in the ship network continuously checks whether data is entering: if so, it is determined that a virus has invaded, the routing backtracking module is activated to find the source of the virus and cut it off, and at the same time, this source is sent to the virus database of the firewall to prevent subsequent intrusions; otherwise, step 3 is repeated.
4. The intelligent defense method for ship-shore network security as described in claim 3, characterized in that, Steps 2) and 3) are executed simultaneously.