NETWORK SECURITY PROTECTION METHOD AND PROTECTION DEVICE

摘要

The embodiments of the present application disclose a network security protection method and a protection device, being able to accurately identify whether a data stream is hostile, thereby improving the accuracy of protection. The network security protection method comprises: receiving a first data stream, the first data stream comprising a source IP address and a destination IP address, the source IP address being the IP address of a first electronic device, and the destination IP address being the IP address of a first server; determining first device attribute information corresponding to the source IP address; determining second device attribute information corresponding to the destination IP address; when the first device attribute information matches the second device attribute information, forwarding the first data stream; and when the first device attribute information does not match the second device attribute information, blocking the first data stream.