进程拦截防火墙关键技术的实现

提出了一种新的基于进程拦截的软件防火墙,讨论了进程拦截软件防火墙的组成及其原理,给出了实现的关键技术和工作流程.经过实际测试表明,利用驱动程序拦截进程的防火墙从操作系统核心层上保护了计算机系统的安全,在恶意行为发生之前予以拦截,进而消除潜在的已知和未知安全风险.由于采用了行为分析而不是威胁代码特征匹配的方法,因而该防火墙安全系统能够以较低的运营成本提供较强的保护功能.

The Implementation of the Firewall Based on the Processes Filtering

A new concept of network firewall is brought forward for protecting self and preventing non-self based on the process filtering agent and a firewall model mechanism is built.A key point of the security agent is implemented based on the processing filtering.The firewall can prevent malice before unauthorized running.Owing to adopting action analysis to replace suited malice characteristic,the whole system can eliminate known and unknown malicious intrusions.