38results about How to "Improve attack defense capability" patented technology

A method for retransmitting message up-transmits buffer stored message to control plane when channels is not blocked by buffer storing message when channel used for up-transmitting message to control plane is blocked.

The invention provides an anti-attack MAC address learning method and device, and network equipment. The method comprises the following steps: when a forwarding chip of the network equipment receivesa message, analyzing a source MAC address and a target MAC address of the message; using the source MAC address and the target MAC address to search for MAC table items of the forwarding chip, whereinthe MAC table items comprise temporary MAC table items and formal MAC table items, and the aging time of the temporary MAC table items is shorter than the aging time of the formal MAC table items; ifmatching table items for the target MAC address are obtained in the temporary MAC table items through the searching, refreshing the matching table items as the formal MAC table items, and establishing the formal MAC table items for the source MAC address; and if the matching table items for the source MAC address and the target MAC address are not obtained in the temporary MAC table items throughthe searching, establishing the temporary MAC table items for the source MAC address. The method and device and the network equipment provided by the invention have the advantages that table item storage space in the equipment can be rapidly freed up, so that the anti-attack capability of the network equipment is improved.

The invention relates to a method for realizing decentralized distributed process guarding based on ad hoc network technology, including generating supermanagement identity and authority and guarding policy files through the creation module, and safely storing them in each guarding node, system process, and a It is a perpetual guard that does not require external intervention. Second, the process needs to be iteratively updated / added nodes; the super administrator externally intervenes, redeploys, and after the deployment is complete, after the super administrator intervention mode exits, start the perpetual guard; start mutual monitoring, Basic services for failover and takeover, message broadcasting, and communication. The present invention utilizes the original self-organizing network technology to construct a credible decentralized distributed process guardian system, which is used to avoid the problem of system process guardian ability failure caused by the guardian's own single point of failure; at the same time, it can protect the scope of Expand from a single machine to all hosts in the whole domain, and at the same time, improve the anti-attack capability of the entire guard system to ensure the credibility of the guard system itself.

The invention discloses a method and a device for verifying the integrity of security critical data of a program in the process of running. The method comprises the following steps: 1) indicating a security critical variable in the program, generating a security critical data set in the process of compiling, dividing a virtual address space of the program into a protected area and a non-protected area in the process of loading the program, loading the security critical data set to the protected area, and constructing an integrity verification tree for a virtual page of the protected area of the program; and 2) in the process of writing program data into a memory, updating a root verification value; and in the process of reading program data from the memory, generating a new root verification value, comparing the new root verification value with the original root verification value, if the two are equal, determining that the security critical data set is not tampered, otherwise, determining that the security critical data set is tampered. The device comprises a data integrity verification circuit, a root verification value storage module and a comparator. The method and the device disclosed by the invention have the advantages of high safety performance, strong attack prevention performance, small calculated amount, and less occupied storage space.

The disclosed method to protect VOIP gateway media channel comprises: deciding whether the received media flow source port number same as the negotiated number to endow the media flow with the highest PRI when the decision result is same; for media flow with different receive and transmit ports, dynamic managing its PRI to set higher PRI for following legal media flow and select the one with the highest PRI to send to DSP. This invention can avoid gateway being paralyzed or hacker vicious attack, and improves security and anti-interference of VOIP system.

The invention provides an attack prevention processing method and device. The attack prevention processing method comprises the steps of locally sending ACL (Access Control List) by a superior device based on an obtained MAC (Media Access Control) address of an attacking terminal; when the number of the ACL used by the superior device per se reaches a preset ACL threshold value and a subordinate device exists at the interface where an attack message is received, sending the MAC address of the attacking terminal to the subordinate device; and after the subordinate device receives the MAC address of the attacking terminal, sending the ACL at the interface where the MAC address of the attacking terminal is learned, and filtering the attack message sent by the attacking terminal. The attack prevention processing method and device can enhance the attack prevention capability of the network and can reduce resource consumption of a BRAS (Broadband Remote Access) device.

A method for retransmitting message up-transmits buffer stored message to control plane when channels is not blocked by buffer storing message when channel used for up-transmitting message to control plane is blocked.