Job network behavior fire wall

Abstract

The invention discloses a job network behavior fire wall, comprising a behavior rule base, a behavior manager and a behavior filter, wherein the behavior rule base is used for defining classification of the job task of document processing and defining the job flow of corresponding document processing; the behavior filter is used for monitoring and filtering the job network behaviors of the log-in users in real time, judging whether the job network behaviors are legal according to the behavior rule base and submitting the judgment result to the behavior manager; and the behavior manager dynamically manages the network jobs according to the judgment result. The fire wall precludes all the non-standard network jobs and document processing behaviors and satisfies the requirements of the job network for high security and reliability.

Description

technical field [0001] The invention belongs to the firewall (Fire Wall) technology in the field of information network security, in particular to a working network behavior firewall. Background technique [0002] The network has become the infrastructure for the operation and work of government agencies, enterprises and institutions, and network-based work is becoming the norm. Corresponding to the network of government agencies and units with first-level security protection capabilities (national standard GB17859-1999), only work-related online behaviors are allowed. We call this a work network. The characteristics of the work network are centered on the data flow management of the file as the carrier, and the corresponding workflow is established around the file processing and management to standardize the user's online work behavior, eliminate illegal network work behavior, and ensure the network security and information security of the work network. [0003] Firewalls ...

AI Technical Summary

Problems solved by technology

[0004] The packet filtering firewall adopts passive isolation control technology to check the data packets at the network layer. The advantages are simple and practical, and the speed is fast. The disadvantage is that it cannot meet the high security requirements of the working network.

The proxy firewall uses active detection and scanning technology to monitor data packets at the application layer. The advantage is that it is more effective in preventing known viruses and attack intrusions, and the security is high. The disadvantage is that the management is complicated, the speed is slow, and it cannot defend against unknown features. Viruses and intrusion attacks

Images