分布式主动型防火墙

介绍了分布式防火墙的概念与模型,分析了分布式防火墙不依赖于网络拓朴结构的优点。为克服分布式防火墙在防止拒绝服务攻击中的不足,提出了分布式主动型防火墙的模型:不被动地防止攻击,而是将内部的攻击拒绝在攻击者处。运用策略分解的方法,将一条KeyNote语言描述的策略分为两部分再发放给相应主机。此方法有效地防止了来自内部的拒绝服务攻击,使服务器能正常提供服务。

Distributed Active Firewall

Introduces the concept and model of DFW(Distributed Firewall), and analyzes the advantage of not depending on the topology of network.In order to overcome the shortage in defending DoS(Denial of Service) attack of DFW,illustrates the model of distributed active firewall: Not defending passively, but stop the internal attack at the place of attacker.Breaks down the policy written in KeyNote into two parts, and they will be sent to the corresponding hosts.This method prevents the server from DoS attack from inside,so the server can work normally.