CN104380686B - 用于实施ng防火墙的方法和系统、ng防火墙客户端和ng防火墙服务器 - Google Patents

用于实施ng防火墙的方法和系统、ng防火墙客户端和ng防火墙服务器 Download PDF

Info

Publication number
CN104380686B
CN104380686B CN201480001549.0A CN201480001549A CN104380686B CN 104380686 B CN104380686 B CN 104380686B CN 201480001549 A CN201480001549 A CN 201480001549A CN 104380686 B CN104380686 B CN 104380686B
Authority
CN
China
Prior art keywords
application
information
security information
firewall
terminal device
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201480001549.0A
Other languages
English (en)
Chinese (zh)
Other versions
CN104380686A (zh
Inventor
山贾·库马尔·纳维
德布塔·纳亚克
章驰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of CN104380686A publication Critical patent/CN104380686A/zh
Application granted granted Critical
Publication of CN104380686B publication Critical patent/CN104380686B/zh
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H04L63/205—Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0245—Filtering by information in the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
    • H04L63/0254—Stateful filtering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101—Access control lists [ACL]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Telephonic Communication Services (AREA)
CN201480001549.0A 2013-11-07 2014-04-03 用于实施ng防火墙的方法和系统、ng防火墙客户端和ng防火墙服务器 Active CN104380686B (zh)

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
IN5037/CHE/2013 2013-11-07
ININ5037/CHE/2013 2013-11-07
PCT/CN2014/074744 WO2015066996A1 (en) 2013-11-07 2014-04-03 A method and system for implementing ng-firewall, a ng-firewall client and a ng-firewall server
IN5037CH2013 IN2013CH05037A (enExample) 2013-11-07 2014-04-03

Publications (2)

Publication Number Publication Date
CN104380686A CN104380686A (zh) 2015-02-25
CN104380686B true CN104380686B (zh) 2018-08-21

Family

ID=53040834

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201480001549.0A Active CN104380686B (zh) 2013-11-07 2014-04-03 用于实施ng防火墙的方法和系统、ng防火墙客户端和ng防火墙服务器

Country Status (3)

Country Link
CN (1) CN104380686B (enExample)
IN (1) IN2013CH05037A (enExample)
WO (1) WO2015066996A1 (enExample)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106375309B (zh) * 2016-08-31 2020-02-11 北京青石绿网科技有限公司 一种移动设备dpi数据安全管理方法
CN106375311B (zh) * 2016-08-31 2019-10-01 北京青石绿网科技有限公司 一种移动设备dpi应用安全管理方法
CN110830454B (zh) * 2019-10-22 2020-11-17 远江盛邦（北京）网络安全科技股份有限公司 基于alg协议实现tcp协议栈信息泄露的安防设备检测方法

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1798436A (zh) * 2004-12-28 2006-07-05 华为技术有限公司 一种保证移动通信系统数据业务安全的方法及系统
CN101444119A (zh) * 2006-03-27 2009-05-27 意大利电信股份公司 在移动通信设备上实施安全策略的系统
CN101729531A (zh) * 2009-03-16 2010-06-09 中兴通讯股份有限公司 网络安全策略分发方法、装置及系统
CN102045320A (zh) * 2009-10-19 2011-05-04 中兴通讯股份有限公司 安全策略的老化方法及装置

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100656481B1 (ko) * 2006-02-03 2006-12-11 삼성전자주식회사 동적 네트워크 보안 시스템 및 그 제어방법
US9160710B2 (en) * 2010-06-25 2015-10-13 Salesforce.Com, Inc. Methods and systems for context-based application firewalls
US9047441B2 (en) * 2011-05-24 2015-06-02 Palo Alto Networks, Inc. Malware analysis system
CN103259806B (zh) * 2012-02-15 2016-08-31 深圳市证通电子股份有限公司 Android智能终端应用程序安全检测的方法及系统

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1798436A (zh) * 2004-12-28 2006-07-05 华为技术有限公司 一种保证移动通信系统数据业务安全的方法及系统
CN101444119A (zh) * 2006-03-27 2009-05-27 意大利电信股份公司 在移动通信设备上实施安全策略的系统
CN101729531A (zh) * 2009-03-16 2010-06-09 中兴通讯股份有限公司 网络安全策略分发方法、装置及系统
CN102045320A (zh) * 2009-10-19 2011-05-04 中兴通讯股份有限公司 安全策略的老化方法及装置

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
下一代防火墙技术探析;胡波;《保密科学技术》;20120229(第02（2012）期);正文第2-3节，表1 *
应用防火墙应用与研究;周安娜;《科技广场》;20090731(第07（2009）期);全文 *

Also Published As

Publication number Publication date
IN2013CH05037A (enExample) 2015-05-08
CN104380686A (zh) 2015-02-25
WO2015066996A1 (en) 2015-05-14

Similar Documents

Publication Publication Date Title
US11082436B1 (en) System and method for offloading packet processing and static analysis operations
EP3863317B1 (en) Method and device for determining category information
US9479450B2 (en) Resolving communication collisions in a heterogeneous network
US20180288062A1 (en) Identification of certificate pinned mobile applications in cloud based security systems
WO2019237813A1 (zh) 一种服务资源的调度方法及装置
US10594734B1 (en) Dynamic per subscriber policy enablement for security platforms within service provider network environments
US12328625B2 (en) Context-based security over interfaces in NG-RAN environments in mobile networks
US10547647B2 (en) Intra-carrier and inter-carrier network security system
US11190547B2 (en) Cellular internet of things battery drain prevention in mobile networks
CN113452663A (zh) 基于应用特征的网络业务控制
US20250142337A1 (en) Intelligent security for zero trust in mobile networks with security platforms using a packet forwarding control protocol
US11943620B2 (en) Context-based security over interfaces in O-RAN environments in mobile networks
US20230130128A1 (en) Detecting and mitigating effects of unauthorized telephone number spoofing
CN104380686A (zh) 用于实施ng防火墙的方法和系统、ng防火墙客户端和ng防火墙服务器
JP2025511451A (ja) Ｏ－ｒａｎニアリアルタイムｒｉｃプラットフォームにおける異常なアクティビティを処理するためのシステム及び方法
KR20250048635A (ko) 통신 시스템, 제어 장치, 및, 통신 방법
CN102938739B (zh) 深度报文检查方法与装置
JP7813945B2 (ja) モバイルネットワークにおいてｎｇ－ｒａｎ環境およびｏ－ｒａｎ環境におけるインターフェイスにわたるコンテキストベースのセキュリティ
US11399009B2 (en) Endpoint context agent traversal of network address table
WO2025096105A1 (en) Intelligent security for zero trust in mobile networks with security platforms using a packet forwarding control protocol

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant