A port hopping communication method and system suitable for a dedicated network

Abstract

The invention discloses a port hop communication method suitable for a private network, wherein the control center performs the following steps: 1-1) generating an identity authentication certificateand a hop initial parameter, and distributing the identity authentication certificate and the hop initial parameter to a server end and a client end; 2-1) receiving that access request of the server end, completing the synchronization of the identity authentication of the server end and the available port information, receiving the access request of the client end, and completing the identity authentication of the client end; 3-1)receiving port access request from client and responding to it. By introducing identity authentication and active port hop function, port information scanning can beeffectively interfered and denial of service attack based on fixed port is resisted, so as to effectively improve the security of private network.

Description

technical field [0001] The invention relates to the field of network security, in particular to a port hopping communication method and system suitable for a dedicated network. Background technique [0002] Traditional private network security prevention methods generally adopt passive reinforcement defense methods, such as adding firewalls, intrusion detection and intrusion prevention to the network, which are essentially lagging passive defenses, and the defense performance mainly depends on the effectiveness of the signature library and policy library. The successful prevention of attacks requires two prerequisites: ①The attack has occurred or is in progress; ②The attack must be a known method or means, and the attack feature extraction and corresponding defense strategy generation and deployment have been completed. [0003] In actual deployment and application, the preconditions required by traditional defense methods are quite unfavorable to network protection, because...

AI Technical Summary

Problems solved by technology

[0003] In actual deployment and application, the preconditions required by traditional defense methods are quite unfavorable to network protection, because passive defense methods can only trigger defense strategies when important servers or hosts to be protected have been attacked or are being attacked, and Only known attack methods or means of attack can trigger the defense strategy, which is already seriously behind the attack, resulting in the risk of the protected server or host being controlled or data information leaked, and the security protection of the network and data cannot be guaranteed.

Images