Network security processing method and device

Abstract

The invention provides a network security processing method and device. The method comprises the steps of judging whether a public network address of an external network sender exists in first verification information or not when an external network data request message sent by the external network sender is received; forwarding the external network data request message if the public network address exists in the first verification information and the state corresponding to the public network address of the external network sender in the first verification information is a first state; updating the first verification information according to a session state between the external network sender and an internal network sender if the public network address does not exist in the first verification information; and forwarding the external network data request message when the state corresponding to the public network address of the external network sender in the updated first verification information is the first state. Through application of the method and the device, the problem that in an existing NAT (Network Address Translation) scheme, an attacker can easily carry out a network attack on an internal network host through NAT table items is solved.

Description

technical field [0001] The present application relates to the technical field of communications, and in particular to a network security processing method and device. Background technique [0002] With the development of communication technology, there are more and more ways of data interaction, and the security of the communication network environment is becoming more and more important. [0003] For example, a common network security management method can be implemented based on NAT technology (Network Address Translation, network address translation). NAT technology can effectively avoid attacks from external networks while solving the shortage of IP (Internet Protocol, a protocol for interconnection between networks), and effectively hide and protect computers inside the network. Among them, the specific application scenario of NAT technology can be: when some hosts in the private network have already been assigned local IP addresses (that is, private addresses used onl...

AI Technical Summary

Problems solved by technology

[0006] This application provides a network security processing method and device to solve the problem that the attackers in the existing NAT scheme can easily attack the intranet host through the NAT entry

Images