DEVICE AND A METHOD FOR CONTROLLING HARMFUL NETWORK TRAFFIC, PARTICULARLY WITH REGARDS TO DETERMINING A HARMFUL TRAFFIC RULE, AND CUTTING OFF A HARMFUL PACKET GENERATED FROM A PROCESS ACCORDING TO THE DETERMINED RULE

摘要

PURPOSE: A device and a method for controlling harmful network traffic are provided to determine a harmful traffic rule, and to cut off a harmful packet generated from a process according to the determined rule, thereby preventing harmful traffic from transferring to other PC. CONSTITUTION: A harmful traffic rule storage(207) receives a harmful traffic rule to store the received rule. An origination packet collector(205) collects raw packets. An origination harmful traffic analyzer(206) receives the raw packets, and extracts origination process information and packet traffic information. An inner process traffic information storage(208) receives the extracted process information and the traffic information, and stores the received information. An inner harmful traffic origination process storage(210) compares the stored traffic information with the stored rule, and stores a corresponding process if the traffic information violates the rule. A harmful traffic origination process cut-off unit(211) extracts origination process information of the packets, and cuts off a packet generated from the corresponding process if the process exists in the origination process storage(210).