Equipment identification system based on equipment fingerprint

Abstract

The invention belongs to the field of network admission control technology, and particularly relates to an equipment identification system based on an equipment fingerprint, wherein the equipment fingerprint information comprises hardware information, operating system information and application service information of the equipment. The system comprises the components of an equipment fingerprint database, an equipment discovery module, an equipment fingerprint acquisition module, an equipment fingerprint processing module, an equipment fingerprint matching module and an artificial identification module. The equipment fingerprint information comprises the MAC OUI hardware information and the operating system information of the equipment and the application service information in a port list. The formats of the fingerprint database comprise MAC OUI, operating system information, port list and equipment type. The equipment fingerprint acquisition module comprises operating system fingerprint information and port fingerprint information. The equipment identification system has advantages of performing network admission control on network equipment through the equipment type, making different security strategies on different kinds of equipment, preventing equipment counterfeiting, and ensuring high safety of enterprise network.

Description

technical field [0001] The invention belongs to the technical field of network access control, and in particular relates to a device identification system based on device fingerprints. Background technique [0002] With the advancement of science and technology, the number and types of access devices in the network are also increasing. It is not just our common personal computers and other devices, such as mobile devices, dumb terminal devices, etc., which are already indispensable for an enterprise. Equipment, the emergence of these equipment has brought great convenience to an enterprise, making the work more efficient. However, the addition of these non-PC devices not only brings convenience to the enterprise network, but also poses a certain threat to the security of the network, because in the traditional network access control technology, it is required to install the client on the PC device, through The client performs security inspection on the device. If the PC dev...

AI Technical Summary

Problems solved by technology

Dumb terminal devices, such as network printers and network cameras, cannot install clients and perform identity authentication, so these devices can be connected to the network by default. Therefore, these devices have also become blind spots in network security. For example, attackers The IP and MAC address of the attacking device can be artificially set to the IP and MAC address of the dumb terminal, so that it can be disguised as a dumb terminal and directly connected to the network, with great potential security risks

Images