Method for raising network security via message processing

Abstract

A method for raising network safety by utilizing message treatment includes placing message in buffer queue with relevant priority level and at channel between central processing unit and hardware retransmission plane separately according to priority level of message, carrying out treatment on message in buffer queue by central processing unit according to dispatch rule, carrying out treatment on message not required to be processed by control processing unit according to property of message and identifying those message according to specific rule for raising antiattack ability of network device.

Description

technical field [0001] The invention relates to a network communication technology, in particular to a method for improving network security through message processing. Background technique [0002] A network attack is an act of maliciously destroying the network and endangering network security. Generally, there are two types of network attacks, one type refers to intrusion or destruction of servers (hosts) on the Internet; the other type is a network attack that directly damages network devices. With the development of social economy, the relationship between network and people's production and life is getting closer, and the possible harm caused by network attacks is also increasing. Especially for attacks on network devices, if there is a problem with the device, the entire network service may be abnormal, which also puts forward higher requirements for the attack defense capability of network devices. [0003] Existing mid-to-high-end network equipment basically adopt...

AI Technical Summary

Problems solved by technology

Although the format and content of these packets are normal, in the case of abnormally large traffic, it will also cause abnormalities in network devices.

Secondly, ACL specification configuration and maintenance work is more complicated

There are various types of network attacks, and new attack methods are constantly emerging. At this time, it is necessary to design new ACL rules for new attack packets. Therefore, the workload of device maintenance is heavy.

Images