Abstract: The present disclosure provides a method and apparatus for suppressing the spread of viruses in a local area network (LAN). The method includes, in response to that an ARP packet is received, determining whether a number of interacting terminals corresponding to a target terminal that sent the ARP packet reaches a first preset threshold; in response to that the number of interacting terminals reaches the first preset threshold, further determining whether a number of abnormal terminal relationships corresponding to the target terminal reaches a second preset threshold; and in response to that the number of abnormal terminal relationships reaches the second preset threshold, providing protection to the target terminal to so to suppress virus propagation in the LAN.

Abstract: The present disclosure provides a method and apparatus for suppressing the spread of viruses in a local area network (LAN). The method includes, in response to that an ARP packet is received, determining whether a number of interacting terminals corresponding to a target terminal that sent the ARP packet reaches a first preset threshold; in response to that the number of interacting terminals reaches the first preset threshold, further determining whether a number of abnormal terminal relationships corresponding to the target terminal reaches a second preset threshold; and in response to that the number of abnormal terminal relationships reaches the second preset threshold, providing protection to the target terminal to so to suppress virus propagation in the LAN.

Abstract: Provided are a method and an apparatus for isolating transverse communication between terminal devices in an intranet. The method includes: when receiving an ARP (Address Resolution Protocol) packet, an access device in the intranet determines whether to perform a first transverse isolation operation for the ARP packet based on a pre-stored first transverse isolation policy; and when receiving a packet, a gateway device in the intranet determines whether to perform a second transverse isolation operation for the packet according to a pre-stored second transverse isolation policy.

Abstract: The present disclosure provides a method and apparatus for suppressing the spread of viruses in a local area network (LAN). The method includes, in response to that an ARP packet is received, determining whether a number of interacting terminals corresponding to a target terminal that sent the ARP packet reaches a first preset threshold; in response to that the number of interacting terminals reaches the first preset threshold, further determining whether a number of abnormal terminal relationships corresponding to the target terminal reaches a second preset threshold; and in response to that the number of abnormal terminal relationships reaches the second preset threshold, providing protection to the target terminal to so to suppress virus propagation in the LAN.

Abstract: The present application provides a method and apparatus for suppressing the spread of viruses in a local area network. The method includes determining, in response to receiving a first service packet initiated by a target terminal, whether a destination port carried in the first service packet indicates one of the preset risky ports; determining, in response to that the destination port indicates one of the preset risky ports, whether a number of interacting terminals in the LAN that have performed ARP interaction with the target terminal reaches a first preset threshold; and in response to that the number of interacting terminals reaches the first preset threshold, providing protection to the target terminal so to suppress virus propagation in the LAN.

Abstract: Methods, devices and apparatus for verifying a terminal device are provided. In one aspect, a method includes: recording a correspondence between a source IP address of an authentication message and an MAC address of the terminal device in a first whitelist after successful authentication is performed for the terminal device based on the authentication message, where the authentication message carries an MAC address of the terminal device; querying the first whitelist based on a source IP address of a data packet when the data packet from the terminal device is monitored; confirming the terminal device is successfully authenticated if the source IP address hits the first whitelist.

Abstract: Provided are a method and an apparatus for isolating transverse communication between terminal devices in an intranet. The method includes: when receiving an ARP (Address Resolution Protocol) packet, an access device in the intranet determines whether to perform a first transverse isolation operation for the ARP packet based on a pre-stored first transverse isolation policy; and when receiving a packet, a gateway device in the intranet determines whether to perform a second transverse isolation operation for the packet according to a pre-stored second transverse isolation policy.

Abstract: Methods, devices and apparatus for verifying a terminal device are provided. In one aspect, a method includes: recording a correspondence between a source IP address of an authentication message and an MAC address of the terminal device in a first whitelist after successful authentication is performed for the terminal device based on the authentication message, where the authentication message carries an MAC address of the terminal device; querying the first whitelist based on a source IP address of a data packet when the data packet from the terminal device is monitored; confirming the terminal device is successfully authenticated if the source IP address hits the first whitelist.