Use voice warning to detect attack sources

Xiaonuo Technology said it will release a Speech Warning dos/arp attack source function recently to help users solve the problem of tracing attack sources. This function is based on the voice warning function unique to qno xiaonuo. When a user is facing dos/arp attacks, it can directly trigger an alarm in the form of voice, prompting the user to launch the original ip address of the computer attacked, the ip address is directly displayed on the management interface, helping the network administrator identify the problematic computer as soon as possible. Prior to this, the network administrator must view the logs or start multiple software and commands to find the attack source.

Zhang Boyang, Technical Director of qno xiaonuo technology, pointed out that after qno xiaonuo product launched the voice warning function, it received enthusiastic responses from many small and medium-sized enterprise network administrators, especially for users with insufficient network technologies, it is also widely used. This new feature is an improvement in customer feedback. On the one hand, it presents the user's desired messages in voice mode, on the other hand, it simplifies the voice message content and reduces the user's Judgment time.

The demonstration of qno xiaonuo shows that before there is no voice warning, the user can only guess whether the log information is under attack. With voice warning, users know that they are under attack, but they need to use packet capture software, such as sniffer, to analyze network packets to find out the attack source; or wait until the attack source computer is affected and dropped, the user knows. This dos/arp attack source voice warning function can more directly launch "Internet dos attacks, ip xx. xx. xx. xx "," intranet dos attack, ip xx. xx. xx. xx "or" intranet ip address tampering, ip address xx. xx. xx. xx ", in combination with the router horn to send an intuitive voice alarm.

In addition, the router configuration screen is also displayed, so that you can quickly confirm the source ip address when you do not hear the warning voice. If an ip address is attacked, the router blocks the ip address for a certain period of time. The interface also displays the blocking time so that the network administrator can take corresponding actions during this period. Qno Xia Nuo said that the arp attack ip voice only displays the ip address before the tampering, rather than the ip address after the tampering, which is convenient for the network management to find.

Figure: displays the dos/arp Attack Source Screen. In the qno na router configuration screen, click "show blocked ip" to bring out the source ip address of the attack. In this example, the attack IP address is 192.168.1.100, the blocking time is only 300 seconds in total, and the remaining time is 193 seconds. Prior to this, the vro used voice to issue a "intranet dos/arp attack, ip address 192.168.1.100" voice warning.

This function is of great help to Internet cafes, community and enterprise users. For enterprises, network administrators can quickly find attack computers by enabling a single screen, saving a lot of time for insect removal.