Protection system for network access behavior

Abstract

The invention discloses a protection system for network access behavior. The system comprises a client device and a network side device; the client device comprises a protection apparatus for network access behavior; the network side device comprises a cloud database, a network side receiving module suitable for receiving at least one kind of domain information transmitted by the client device, a network side inquiry module suitable for inquiring whether the cloud database stores any type of the at least one type of domain information, and obtaining the inquiry result, and a network side transmitting module suitable for transmitting the inquiry result to the client device; and the protection apparatus for network access behavior comprises a driver layer module and an application layer module. The system provided by the invention directly uses the targets of these high layer protocols to judge whether the network access request is safe, thereby intercepting the network access behavior of rogue programs more effectively.

Description

technical field [0001] The invention relates to the technical field of network communication security, in particular to a protection system for network access behavior. Background technique [0002] With the rapid development of Internet technology and the general reduction of Internet access costs, the Internet has become an indispensable and important part of the daily life of most ordinary people. However, in order to express themselves and prove their abilities or other needs (such as politics, military, religion, nationality, patents, etc.), some programmers often write some malicious programs that affect the normal operation of the computer, so that those malicious programs Intruded users cannot achieve their own purpose of surfing the Internet, and may even paralyze the entire system. Therefore, network security has become the focus of attention today. [0003] Existing network protection methods are based on TCP (Transmission Control Protocol, Transmission Control ...

AI Technical Summary

Problems solved by technology

When the program uses these high-level protocols to request network access, the purpose of the network access request cannot be determined solely by the IP address and port; moreover, the IP address and port change very frequently in the network, such as when the network provider is changed. However, it takes a certain amount of time to update the local database, so the existing network protection methods cannot effectively block the network access behavior of malicious programs in a timely manner.

Images