Deep package detection source: CCID News - China Computer News
Deep packet inspection technology introduction Author: Fengyun Bo issued a document time: 2004.11.29
The current application layer agent and status detection firewall cannot prevent large-scale network attacks. For example, the current epidemic impact wave, oscillating wave, NIMDA virus, etc. can use vulnerabilities to attack, spam floods from affecting the efficiency of the network, while application layer agents and status detection firewalls cannot effectively prevent such attacks. The firewall for applying depth package detection technology provides intrusion detection and attack prevention, it can inspect the information package flow, find malicious behavior, can find known attacks according to feature detection and content filtering, and understand what is " Normal "communication while preventing exception access. Deep package test firewall represents the future development direction of firewall technology. Depth package detection technology successfully solved the universal existing rejection service attack (DDoS) issues, viral dissessions and advanced application intrusion issues, representing the mainstream development direction of the firewall. Deep package detection firewall should prevent malicious data attacks: Identify malicious data traffic, and effectively block malicious data attacks, solve Syn Flooding, Land Attack, UDP Flooding, Fragg, Ping of Death, Unreachable Host Equal attack, effectively cut off the malicious virus or Trojan's flow attack; prevent hacker attacks, identifies hackers' malicious scans and effectively block or deceives malicious scanners. Some mainstream firewall manufacturers at home and abroad have begun to adopt depth package detection techniques. For example, checkpoint's SmartDefense can find common attacks, then discard the associated session; NetScreen enables it to combine depth package detection technology to its hardware firewall.
