基于被屏蔽子网混合型智能防火墙设计与实现

分析了传统防火墙存在的缺点，探讨了网络IP层、应用层信息在防火墙安全策略制定过程中综合运用的方法，研究了防火墙过滤规则自动产生、自动配置的途径，提出了一种基于被屏蔽子网的混合型智能防火墙模型，它可以克服包过滤防火墙效率高但规则难制定，应用代理防火墙规则针对性强，但工作效率低的矛盾，同时也可克服传统防火墙对未列出的黑客攻击不予理会的弊病。

Design and Implementation of A Hybrid Intelligent Fire-wall System Based on the Screened Subnet

In this paper, we analyze the weakness of traditional fire-wall at first; then discuss how to make full use of the in- formation from the network layer and the application layer in the process of making secure strategy, how to produce and install these filtering rules for the fire-wall automatically ; finally , we present the model of hybrid intelligent fire-wall system based on the screened subnet. Our fire-wall not only establish filtering rules easily, filter the data packages efficiently, but also can deal with unlisted hacker-attack in time.