動態網路特徵處理裝置以及動態網路特徵處理方法

5G資安防護系統開發計畫

何嘉康、黃冠龍、賴家民

一種動態網路特徵處理裝置，包括儲存媒體以及處理器。儲存媒體經配置以儲存複數個惡意特徵群組，其中各惡意特徵群組對應於惡意特徵，各惡意特徵群組包括複數個惡意網路位址。處理器耦接於儲存媒體。處理器經配置以擷取一未知封包之未知網路位址；比對未知網路位址及各惡意特徵群組的惡意特徵；以及當判定未知網路位址與這些惡意特徵群組之至少一者的惡意特徵相符，則過濾未知封包。

A dynamic network feature processing device includes a storage medium and a processor.  The storage medium is configured to store a plurality of malicious feature groups, and each malicious feature group corresponds to a malicious feature.  The malicious feature group includes a plurality of malicious network addresses.  The processor is coupled to the storage medium.  The processor is configured to acquire an unknown network address of an unknown packet; compare the unknown network address with the malicious feature of each malicious feature group; and filter the address with the malicious feature of each malicious feature group; and filter the unknown packet when determine that the unknown network address satisfies the malicious feature of at least one of the malicious feature group.