Shulou(Shulou.com)06/01 Report--

With the accelerated penetration of the Internet, it can be said that the network has become an indispensable part, which is called the fifth largest sovereign space after sea, land, air and space. Just as the territory of the country is inviolable, the cyberspace of our country is also inviolable, so network security is also very important. Especially in recent years, the national attention to network security has been raised to a new height, and the view that "without network security, there will be no national security" is deeply recognized by everyone.

Lu Na, Deputy General Manager of Neusoft Network Security Division

As Lu Na, deputy general manager of Neusoft Network Security Division, said, the construction of network security capability is the national defense construction of the network world. In the real world, China has achieved the security and reliability of national defense and is able to produce its own defense weapons. By the same token, in the network world, if you want to control your own destiny, you must be completely secure and reliable, and the core technology is the most important weapon of the country, but looking at the domestic network security market, the most mainstream architecture is still Intel + Linux operating system architecture. Lu Na believes that the current society is in the transition from the information age to the data age, but whether it is the information age or the data age, network security will only become more and more important, and the construction of network security has increasingly become the core competence of the country!

What's the gap?

Now that we talk about the security and reliability of network security, we might as well understand what level our country is at and what gaps there are compared with foreign countries.

Huang Chuan-hui, chief architect for security and reliability of Neusoft Network Security Division, mentioned that at present, compared with foreign countries, the biggest gap in network security construction in China is the gap in hardware (underlying general processing chips) and basic software.

At present, China's safe and reliable ecology is still under construction, compared with Intel + Linux architecture ecology, it is indeed not sound enough. However, it is gratifying that the safe and reliable development of our country is not as pessimistic as we think, and the gap exists, but it can still meet the needs of use in most areas.

However, in the domestic market, users still lack confidence in domestic security and reliability, worried not only about the lack of performance and stability, but also that the price is too expensive. So out of mistrust of domestic technology, many users still choose to use Intel + Linux security architecture.

How do you do that?

What has Neusoft done to address these gaps and barriers? It is understood that Neusoft has established a network security department since 1996. Through more than 20 years of relevant accumulation, Neusoft's secure and reliable products have been able to really come into use. In December 2015, Neusoft first launched the first gigabit high-performance firewall based on Godson, and obtained the evaluation of various standards of the Ministry of Public Security and the Secret Bureau, and obtained the qualification of listing sales.

Looking back on 2018, Lu Na, deputy general manager of Neusoft Network Security Division, believes that at present, many Anke products in China have reached the state of availability and are striving for good use. Good blacksmiths are needed to make good steel. If domestic Anke products want to be recognized by users, we must first make our own products well in order to enhance the confidence of domestic users. In addition, Neusoft is also fully aware that it is impossible for Neusoft to make good Anke products alone. Neusoft always insists on deep technological integration with domestic competitors, deepening adaptation exchanges and cooperation, and hopes that through joint efforts, work together to build a safe and reliable ecology that is ultimately recognized by users and the market.

Huang Chuanhui said that in the past two years, the ecology of chip manufacturers such as Mega Core, Feiteng, Longxin and Shenwei has become more and more powerful. Although there is still a certain gap compared with the ecology of Intel + X86, it has gradually become mature.

According to reports, Neusoft did relevant market research as early as 2015, and found that for enterprise networks, the firewall application environment of 50% or 70% of the users on the market is still in the gigabit stage, and the 10G~20G network may be reached in the data center or campus network, while Neusoft has reached the order of magnitude of 40G~80G based on domestic secure and reliable platforms (such as Feiteng, Godson, Shenwei, Zhaoxin). More than 90% of the user needs can be covered.

In terms of access rate, Neusoft's secure and reliable firewall products can achieve 200000-500000 connections based on domestic platforms, which is quite high even compared to X86 firewalls. While x86 firewalls of mainstream models such as 1U/2U can reach an order of magnitude of about 160g or even 240g, while firewalls based on domestic platforms can achieve 80g, there is still a data gap of more than two times, but for more than 90% of users who use gigabit networks or even 10x20g networks, domestic platforms can fully meet the requirements of users.

At the application level, according to Huang Chuan-hui, Neusoft's firewall based on domestic platform has been operating steadily within Neusoft Group for several months, without any failure, and has always been able to maintain stable operation. To know that Neusoft Group has 20,000 employees, can support such a huge system, it can be seen that Neusoft's domestic secure and reliable firewall can indeed meet the requirements of users in terms of performance and function.

How are you doing?

Of course, the advantages of the secure and reliable firewall developed by Neusoft are not only that. Students who know Neusoft know that the government and many key infrastructure industries are Neusoft's main customers. These departments and organizations have unmatched requirements for network security. What are the reasons why they choose to use Neusoft's secure and reliable firewall?

● first of all, Neusoft, as a manufacturer with more than 20 years of network security experience, has an extremely stable core R & D team. There is also a deep accumulation at the technical level. It is said that Neusoft independently developed a set of high-performance and highly stable network protocol stack. Layer 2 and layer 7 of the protocol stack are all independently developed, and Neusoft's network protocol stack security modules are all independently developed.

● second, security products will have very critical rules, and many security functions are implemented through rules. With the increasing number of rules, the performance will gradually decline. In terms of rules, Neusoft has developed a nonlinear rule matching algorithm, which requires a balance between performance and memory space. Neusoft has patents in this area and has carried out related optimization.

● third, in terms of log performance, the vast majority of network security products, their log systems are based on traditional relational databases, performance often can not meet the needs of practical applications. For the log system, Neusoft independently developed a small embedded database system, whose performance is dozens of times higher than that of the traditional database.

● fourth, processor development today, want to improve performance, multi-core is one of the unavoidable problems. Neusoft has designed multi-core related algorithms and optimized them. With the increase of the number of cores and the expansion of performance, Neusoft can almost achieve a loss of only 10% to 20%.

Finally, ●, Neusoft has a good underlying architecture and can be customized according to the needs of users, so it is difficult to make a product to meet the needs of all users in the field of security. Different users have different security requirements, Neusoft based on Anke network security products can still ensure efficient customized development.

Of course, Neusoft is also well aware that there are some "shortcomings" in hardware, and the performance of domestic chips can not catch up with Intel, but it can still meet more than 90% of the needs of users. In addition, Neusoft has a rich accumulation of technology, which can make up for the shortcomings of hardware through software optimization, so as to improve the performance several times and solve the lack of domestic firewalls. In addition, Neusoft and domestic competitors in the Anke ecosystem can fully cooperate, exchange needed goods and develop together.

Summary

Through the introduction, we can know that Neusoft has a very profound technical accumulation and experience at the level of safe and reliable firewall, and its products can well meet the needs of users. Luna said that in addition to secure and reliable firewalls, Neusoft's security product line based on security and reliability is also expanding, including UTM, IPS, IDS, database audit, network gates and other product lines.

"at present, we have launched related products based on Godson and Feiteng platform, and products based on Zhaoxin and Shenwei platform are also in the process of launching." Luna said. She mentioned that in the future, the national authorities will certainly issue relevant product management and testing standards, and Neusoft will actively participate in the formulation of national standards and ecological adaptation in these areas. To give full play to Neusoft's advantages in the field of Anke, Neusoft not only has the ability to develop network security products, but also has the advantages of Anke integration, Anke electronic document application software development and so on. Neusoft carried out excellent practice cases in many fields in 2018. Accumulated a large number of rich experience in the implementation of services.

We also believe that through the continuous efforts and cooperation of Neusoft and domestic security manufacturers, China's network security will be bigger and stronger!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.