Method and device for blocking network flows

Abstract

The invention provides a method and device for blocking network flows. The method comprises steps of extracting report characteristics of a received first report; searching whether the report characteristics exist in a characteristic association library, wherein the characteristic association library comprise multiple characteristic association groups and each characteristic association group comprise public characteristics and at least two kinds of service characteristics associated with the public characteristics; if the report characteristics exist in the characteristic association libraryand the report characteristics are public characteristics, judging whether service characteristics which are associated with the report characteristics and carry the prescription marks exist, whereinthe prescription marks are added to the service characteristics of the characteristic association groups carried by the received reports; and if yes, checking whether processing action corresponding to the service characteristics carrying the prescription marks in the characteristic association groups where the report characteristics are arranged is the blocking, if yes, abandoning the first report. According to the invention, identification of the network flows in case of quite low expense is achieved; and the function of network flow blocking is prevented from affecting processing of normalservices.

Description

technical field [0001] The present application relates to the technical field of communications, and in particular to a method and device for blocking network traffic. Background technique [0002] With the development of informatization, various network application services emerge in an endless stream, greatly enriching people's lives. For some network environments, it is necessary to restrict the use of some application services. For example: For the enterprise intranet, the use of video services and game services can be restricted to prevent employees from wasting work time and network bandwidth. [0003] In this case, it is necessary to distinguish the network traffic of each application service, so as to block part of the network traffic based on the result of the distinction. At present, more and more servers transmit data through the HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer, Hypertext Transfer Protocol based on Secure Socket Layer) protocol to en...

AI Technical Summary

Problems solved by technology

However, the process of decrypting HTTPS traffic is more complicated. In a network environment with heavy network traffic, it will lead to equipment performance degradation and affect normal business processing.

Images