| 摘要 |
A network based information loss prevention system is disclosed. The network based information loss prevention system according to an embodiment of the present invention includes: an FPGA engine including a pattern matching part which performs hash-processing of a payload of an input packet inputted by an inline or mirroring method in a fixed size unit, and checks a matching rule ID and an upload channel ID corresponding to a previously stored pattern when the payload is compared with and matched to the previously stored pattern, and adds tagging information including the matching rule ID and the upload channel ID, as a result of the matching, to a header of the input packet and then outputs the header of the input packet; and an MCP engine including a session list filter which receives the packet added with the tagging information and checks whether the packet is a packet of a previously registered session, and performs previously registered processing as to the previously registered session when the packet is a packet of the previously registered session, and, otherwise, carries the packet, and a processing part which uploads, forwards or wastes the packet in correspondence to the matching rule ID, in case of a matched packet by checking the tagging information. |
