Network Defense Method and Security Detection Device
AssigneeHuawei Technologies Co., Ltd.
InventorZhenwei Zhang
Life of this patent
Estimating the term…
Abstract
A network defense method and a security detection device, to resolve a problem of malicious traffic spreading in a campus network. The method includes a security detection device receiving a first packet. The security detection device detects the first packet when security detection on the first packet is not completed and a security detection capability of the security detection device is sufficient to detect the first packet. Furthermore, the security detection device forwards the first packet when security detection on the first packet is not completed and the security detection capability of the security detection device is insufficient.
Claims20
A network defense method implemented by a security detection device, wherein the method comprises:
- receiving a packet;
- performing security detection on the packet when the security detection on the packet that is received is not completed and a security detection capability of the security detection device is capable of performing the security detection on the packet;
- and
- forwarding the packet when the security detection on the packet that is received is not completed and the security detection capability is not capable of performing the security detection on the packet.
An apparatus, comprising:
- a memory configured to store a computer program;
- and
- a processor coupled to the memory and configured to execute the computer program to cause the apparatus to be configured to:
- receive a packet;
- perform security detection on the packet when the security detection on the packet that is received is not completed and a security detection capability of the apparatus is capable of performing the security detection on the packet;
- and
- forward the packet when the security detection on the packet that is received is not completed and the security detection capability is not capable of performing the security detection on the packet.
A computer program product comprising computer-executable instructions stored on a non-transitory computer-readable storage medium that, when executed by a processor, cause the processor to:
- receive a packet;
- perform security detection on the packet when the security detection on the packet that is received is not completed and a security detection capability of the apparatus is capable of performing the security detection on the packet, and
- forward the packet when the security detection on the packet is not completed and the security detection capability is not capable of performing the security detection on the packet.
Dependencies are inferred from the claim text.