Method, device and system for processing attack data packages

Abstract

The embodiment of the invention provides a method, device and system for processing attack data packages, and relates to the technical field of communications. The method, device and system provided by the invention can be adopted to limit a network bandwidth which is occupied when the attack data packages are transmitted in a network, so that the transmission of normal data packages is guaranteed. The method comprises the following steps: a management node receives the description information of an attack data package, which is sent by a sensing node, and the attack type of the attack data package; a processing strategy of the attack data package of the attack type is confirmed according to the attack type, and the description information and the processing strategy are sent to an interchanger through an SDN controller; the interchanger executes the operation indicated in the processing strategy on the attack data package with the description information, wherein the processing strategy is used for indicating the interchanger to execute the operation indicated in the processing strategy on the attack data package with the description information. The method provided by the invention is applied to a network security maintenance technique.

Description

Technical field [0001] The present invention relates to the field of communication technology, in particular to a processing method, device and system for attacking data packets. Background technique [0002] With the rapid development of cloud technology, there are more and more problems in the application of cloud technology. For example, the server of the cloud data center (hereinafter referred to as the cloud server) will be attacked by various attack data packets during network protocol (English: Internet Protocol, abbreviation: IP), such as distributed denial of service (English: distributed denial of service). service, abbreviation: DDoS) attacks, fake news attacks, etc. Therefore, processing attack data packets and ensuring secure communication with cloud servers has become one of the core technologies of cloud technology. [0003] Currently, a common way to process attack data packets is to deploy a physical firewall on the entrance cloud server of the cloud data center,...

AI Technical Summary

Problems solved by technology

[0004] However, in the above-mentioned method of preventing the attack data packets from entering the cloud server through the firewall, since the firewall can only prevent the attack data packets from entering the cloud server, the switch responsible for forwarding the data packets to the firewall will still forward these attack data packets to the firewall. , that is, the attack data packets will still be transmitted in the network, therefore, these abnormal data packets will occupy a large amount of network bandwidth, thereby affecting the transmission of normal data packets

Images