FIELD: computer equipment.
SUBSTANCE: method comprises stages, at which: from the sender with the address S1 for the recipient with the address R1 receiving the network packet P1; using the network connections table processing module searching for the network connection descriptor, to which the network packet P1 belongs, based on the sender S1 address, the recipient R1 address, the encapsulated transport layer protocol number, information about the transport layer protocol; if the network connection descriptor is not found, then creating the network connection descriptor, and storing in the network connection table using the network connection table processing module; analyzing the network packet in the network packet classification module; in the network connection descriptor storing the information obtained from the network packet from the network packet classification module analyzing; performing the network packet filtering.
EFFECT: technical result consists in increase in the network in the protected segment security.
1 cl
Title | Year | Author | Number |
---|---|---|---|
METHOD OF OPERATING A FIREWALL | 2017 |
|
RU2667805C1 |
METHOD OF PROTECTING COMPUTING NETWORK FROM UNAUTHORIZED SCANNING AND BLOCKING NETWORK SERVICES | 2017 |
|
RU2648949C1 |
METHOD OF FILTERING SECURE NETWORK CONNECTIONS IN A DIGITAL DATA NETWORK | 2018 |
|
RU2695983C1 |
METHOD OF MANAGING CONNECTIONS IN FIREWALL | 2012 |
|
RU2517411C1 |
METHOD OF PROCESSING NETWORK TRAFFIC USING FIREWALL METHOD | 2017 |
|
RU2697698C2 |
FIREWALL SYSTEM | 2017 |
|
RU2691192C1 |
MULTI-LEVEL FIREWALL ARCHITECTURE | 2004 |
|
RU2365986C2 |
METHOD OF PROTECTING COMPUTER NETWORKS FROM UNAUTHORISED SCANNING AND BLOCKING OF NETWORK SERVICES (VERSIONS) | 2011 |
|
RU2469390C1 |
ROBUST AND SECURE HARDWARE-COMPUTER SYSTEM IN CLOUD COMPUTING ENVIRONMENT | 2013 |
|
RU2557476C2 |
SYSTEM AND METHOD FOR ANALYSING INCOMING TRAFFIC FLOW | 2023 |
|
RU2812087C1 |
Authors
Dates
2019-02-06—Published
2018-04-05—Filed