A network routing protocol protection method and system based on traffic behavior

Abstract

An embodiment of the present invention provides a network routing protocol protection method based on traffic behavior. The method includes: the security management platform sends the rule template to the firewall; the firewall monitors the threat of the flow data according to the rule template and reports the threat flow data packets obtained through monitoring to the security management platform; the threat flow data received by the security management platform After the packet reaches the first threshold, an instruction is issued to enable the firewall to count the number of identical times of the most threatening routing protocol field parameters; The management platform generates a new configuration template. Compared with traditional routing protocol protection methods, the invention can effectively improve the protection effectiveness.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a network router protocol protection method and system based on traffic behavior. Background technique [0002] The network routing protocol belongs to the network layer in the seven-layer network protocol, and the network layer defines the end-to-end packet transmission. The traditional network routing protocol protection method is to establish a security control point at the boundary of the network connection. By allowing, denying or redefining the data flow through the firewall, it can audit and control the services and access to and from the internal network. [0003] The network routing protocol protection method is mainly implemented by means of traffic packet filtering, state monitoring and proxy service. The protection rules are fixed, and the protection rules cannot be automatically changed according to the specific behavior of the data traffic. It does not have...

AI Technical Summary

Problems solved by technology

[0003] The protection method of the network routing protocol is mainly realized by means of flow data packet filtering, state monitoring and proxy service. The protection rules are fixed, and the protection rules cannot be automatically changed according to the specific behavior of the data traffic. It does not have the function of self-learning and intelligent update of the protection rules.

Images