Full-duplex firewall protection method supporting mandatory access control

Abstract

An embodiment of the invention discloses a full-duplex firewall protection method supporting mandatory access control. The method comprises the following steps of: S1, the full-duplex firewall being an intrusion detection system in a form of a distributed node network; S2, the full-duplex firewall establishing an endogenous security mechanism rule in the form of ''requesting operation chain and service response tree'' based on a business operation flow of a differentiated role authority; S3, the full-duplex firewall supporting a request operation detection under full-scale parsing at the levelof boundary environment and computing environment, and completing an integrity protection; S4, performing a consistency response detection, and completing a confidentiality protection facing information assets and system services which are hierarchically defined; S5, supporting dispatching and control for normal / abnormal network traffic through SDN, inducing suspicious traffic to a honeynet trap,and forming a business audit forensics under workflow trace.

Description

technical field [0001] The invention relates to the field of network security, in particular to a full-duplex firewall protection method supporting mandatory access control. Background technique [0002] In important industries and fields such as transportation, government affairs, energy, finance, and communications, key information infrastructure is integrated and controlled, which is directly related to the lifeline of the country. National economy and people's livelihood and public interest. Aiming at the severe challenges brought about by complex network topology, open and converged environment, multiple access terminals, massive business applications and unknown vulnerability backdoors in critical information infrastructure, propose and build solutions to reverse the passive situation of "blocking and killing" and adhere to "manageable A controllable defense-in-depth security system and the establishment of a controllable risk-controllable "skynet recovery, sparse but...

AI Technical Summary

Problems solved by technology

[0009] Firewalls that integrate multiple additional functions such as VPN, PKI, IPSec, anti-virus, and intrusion prevention in an extensive manner are in a discrete security form under the coupling relationship of fragmented services. In the face of dynamic and complex network attacks, they cannot Implement adaptive and intensive linkage defense in the network application environment

Images