Unified threat management system and data processing method thereof

Abstract

The invention provides a unified threat management system and a data processing method thereof. The system comprises a data storage module, a service processing module and a management center, wherein the data storage module comprises a plurality of data pools; all the data pools are respectively used for storing data of one type; the service processing module comprises one or more than one computing pool; all computing pools are respectively used for performing processing operation for achieving one service function, reading the data from the data pools used for storing the data of which the type is required by the computing pools, and outputting the processed data to the data pools used for storing the data of the type; and the management center is used for saving a first corresponding relation between each data pool and each type of the data, and a second corresponding relation between each computing pool and each service function. The unified threat management system and the data processing method thereof provided by the invention are capable of overcoming defects in the aspects of dynamic expansibility and fault tolerance in a directly coupled integrated security gateway.

Description

technical field [0001] The invention relates to the field of network security, in particular to a unified threat management system and a data processing method thereof. Background technique [0002] UTM (Unified Threat Management, security gateway) is a gateway product, and the software structure should be conducive to improving the overall performance. UTM, as a unified threat management product, covers many functions such as intrusion prevention, anti-virus, anti-spam, content filtering and traffic management, so it must include multiple analysis and processing engines, how to integrate analysis and processing engines, and combine performance consumption The key business unit becomes the primary consideration in the design of UTM product software structure. A more popular way in the industry is to introduce an integrated design concept into the software structure design of the integrated security gateway. The analysis and processing engine of various functions such as in...

AI Technical Summary

Problems solved by technology

(3) The input of each functional module is passive, which means that the data input is pushed by other modules, and the type of input data cannot be proposed by itself

[0007] The directly coupled integrated security gateway software structure has the following deficiencies: (1) Data privatization caused by direct coupling is not conducive to the dynamic expansion of system functions

When a module outputs data, it is necessary to ensure that the receiver of the data is alive and able to receive the data. Once the subsequent module cannot receive and process data in time, it may affect the functional processing of the previous module.

This backward dependence makes the system more sensitive to the propagation of faults, which is not conducive to the fault tolerance and stability of the system.

Images