INTEGRATED SECURITY ROUTER FOR IDC AND INTEGRATED SECUTIRY SERVICE BASED ON TRAFFIC SHAPING AND IPS FUSION IMPLEMENTATION

摘要

The integrated security router for IDC according to an embodiment of the present invention is a rule set setting unit that sets a rule-set including a plurality of rules in an environment setting file related to a firmware (target firmware) of an IDC (Internet Data Center) server. ; A pattern analysis unit that determines whether the data traffic collected by the IDC server is traffic of an intrusion attack packet or a suspicious packet through pattern analysis based on the plurality of rules; And when the data traffic is determined to be the traffic of the intrusion attack packet, the intrusion attack packet is immediately blocked, and when the data traffic is determined to be the traffic of the suspicious packet, traffic shaping instead of allowing It includes a suspicious packet management unit that manages to prevent the occurrence of problems in the entire network through Shaping).