Method for raising network security via message processing

Abstract

A method for raising network safety by utilizing message treatment includes placing message in buffer queue with relevant priority level and at channel between central processing unit and hardware retransmission plane separately according to priority level of message, carrying out treatment on message in buffer queue by central processing unit according to dispatch rule, carrying out treatment on message not required to be processed by control processing unit according to property of message and identifying those message according to specific rule for raising antiattack ability of network device.

Description

Technical field [0001] The invention relates to a network communication technology, in particular to a method for improving network security through message processing. Background technique [0002] A network attack is a behavior that maliciously damages the network and endangers network security. There are generally two types of network attacks. One type refers to intruding or destroying servers (hosts) on the Internet; the other type is a network attack that directly destroys network devices. With the development of social economy, the relationship between the network and people's production and life has become closer, and the possible harm caused by network attacks is also increasing. In particular, attacks on network equipment, such as equipment problems, may cause the entire network service to be abnormal, which also puts forward higher requirements on the anti-attack capability of the network equipment. [0003] Existing mid-to-high-end network devices basically use an arch...

AI Technical Summary

Problems solved by technology

Although the format and content of these packets are normal, in the case of abnormally large traffic, it will also cause abnormalities in network devices.

Secondly, ACL specification configuration and maintenance work is more complicated

There are various types of network attacks, and new attack methods are constantly emerging. At this time, it is necessary to design new ACL rules for new attack packets. Therefore, the workload of device maintenance is heavy.

Images