| 摘要 |
PURPOSE: A hidden-type intrusion detection and cutoff controlling system and a controlling method thereof are provided to detect illegal intrusion of hackers through a network by using a line speed, so as to cut off packets of the illegal intrusion in advance. CONSTITUTION: An RISC(Reduced Instruction Set Computer) processor(110) provides a management function and instructs a security policy. An external MAC(Media Access Controller)(150) transceives packets by being connected with an external connection unit(200). An internal MAC(160) transceives packets by being connected with an internal connection unit(300). A packet memory(120) temporarily stores the packets received through the external MAC(150) and the packets received through the internal MAC(160). A packet control engine(130) temporarily stores the packets received through the external and internal MACs(150,160) in the packet memory(120), and checks whether the packets are harmful, if the packets are normal, to deliver the packets to the external and internal connection units(200,300) through the external and internal MACs(150,160) or to the RISC processor(110) at need, and if harmful, to cut off the packets or generate an alarm to the RISC processor(110). A CAM(Contents Address Memory)(140) extracts stored contents by using contents rather than an address of a memory. And a statistical value memory(170) stores statistical values.
|
