| 嵌入内核式动态防火墙的设计与实现 |
| |
| 引用本文： | 刘宝旭,毕学尧,许榕生,曾勇. 嵌入内核式动态防火墙的设计与实现[J]. 计算机工程, 2002, 28(2): 11-12 |
| |
| 作者姓名： | 刘宝旭 毕学尧 许榕生 曾勇 |
| |
| 作者单位： | 1. 中国科学院高能物理研究所计算中心,北京,100039
2. 福州大学计算机系,福州,350002 |
| |
| 基金项目： | 中国科学院知识创新工程重大项目(KJCX1-09) |
| |
| 摘 要： | 提出一种新型的可嵌入内核的动态防火墙模型，描述了一个基于该模型的“安拓”防火墙系统的组成结构和实现机制，讨论了该系统实现中的关键技术及其解决方法，包括：状态检测技术、动态规则技术，可动态加载内核模块技术及自身安全保护设计等，归纳了该系统的特点及应用前景，并总结了今后的研究方向。
|
| 关 键 词： | 计算机网络 网络安全 内核工动态防火墙 动态规则 状态检测 设计 |
| 文章编号： | 1000-3428(2002)02-0011-02 |
| 修稿时间： | 2001-04-19 |
Design and Implementation of the Embedded Kernel Dynamic Firewall |
| |
| LIU Baoxu,BI Xueyao,XU Rongsheng,ZENG Yong. Design and Implementation of the Embedded Kernel Dynamic Firewall[J]. Computer Engineering, 2002, 28(2): 11-12 |
| |
| Authors: | LIU Baoxu BI Xueyao XU Rongsheng ZENG Yong |
| |
| Affiliation: | LIU Baoxu1,BI Xueyao1,XU Rongsheng1,ZENG Yong2, |
| |
| Abstract: | A new model is proposed for the dynamic firewall system based on the embedded kernel in this paper. With this model, the components and implementation of a iTOP firewall system are described. Some key technical problems and their solutions, which includethe state inspection technique, dynamic rule technology, loadable kernel modules technology , and the design of system security are also discussed. The characteristic, consistency ,the application prospect and the research direction in the future of this system are also summarized. |
| |
| Keywords: | State inspection Dynamic rule technology Loadable kernel modules Packet filtering Proxy services |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
