公开(公告)号：US20140344888A1

公开(公告)日：2014-11-20

申请号：US14277360

申请日：2014-05-14

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Jeong-Han YUN ,  Heemin KIM ,  Kyoung-Ho KIM ,  Woonyon KIM ,  Byung-gil MIN

IPC: H04L29/06

CPC classification number: H04L63/20 ,  H04L63/1408

Abstract: A network security apparatus includes a management unit, a security policies monitoring unit, a security monitoring unit, a log security check unit, and a log transmission unit. The management unit receives network security apparatus setting information, security policies and log generation policies from the outside. The security policies monitoring unit checks whether the security policies comply with a set format. If the security policies comply with the set format, the security monitoring unit monitors whether a communication node communicates in compliance with the security policies. The log security check unit generates a monitoring log based on the log generation policies, and checks whether the monitoring log complies with a log setting format. If the monitoring log complies with the log setting format, the log transmission unit transmits the security log to the outside, thereby performing the outside network security.

Abstract translation: 网络安全装置包括管理单元，安全策略监视单元，安全监视单元，日志安全检查单元和日志传输单元。 管理单元从外部接收网络安全设备设置信息，安全策略和日志生成策略。 安全策略监控单元检查安全策略是否符合设置的格式。 如果安全策略符合设定的格式，则安全监控单元监视通信节点是否按照安全策略进行通信。 日志安全检查单元根据日志生成策略生成监控日志，并检查监控日志是否符合日志设置格式。 如果监控日志符合日志设置格式，则日志发送单元将安全日志发送到外部，从而执行外部网络安全。