| 摘要 |
PROBLEM TO BE SOLVED: To provide a network security system and its operating method in which hardware processing and software processing are coupled to analyze and prevent abnormal traffic. SOLUTION: The network security system includes a packet-dedicated processor for primarily performing hardware filtering on static attacks of network traffic, and a host system provided with a software filter for secondarily performing software filtering on dynamic attacks of network traffic. The packet-dedicated processor includes an Ethernet(R) controller 21, an inline controller 22, a pattern search engine 24, a header search engine 23, an SRAM 25 and a PCI 26, and an attacked packet is searched and cut off for prevention from attacks. Furthermore, an internal network can be protected from abnormal traffic through software filtering on dynamic attacks. COPYRIGHT: (C)2005,JPO&NCIPI
|
