Internet防火墙及其发展趋势

本文叙述了Internet来自外部、内部、硬件、软件方面的十种安全威胁和攻击，给出了防火墙的限制、隔离、筛选、过滤和屏蔽作用，介绍了防火墙的六种基本结构类型，论述了过滤路由器、双宿主主机、主机过滤、过滤子网和吊带式五种安全结构，分析了传统防火墙的七种不足，给出了目前防火墙混合应用包过滤技术、代理服务技术和其它一些技术的发展趋势。

A TREATISE ON THE TREND OF INTERNET FIREWALL DEVELOPMENT

In this paper, ten sorts of internal and external threats and attacks upon the Internet are summed up. The functions of the limitation, sep-aration, screening ,filtering and shielding methods of Internet firewall are presented.The six basic structures of firewall and the security architectures of filter router,double hosts,hosts filter,filter sub- network and gallows firewall are introduced here.Finally,the seven shortcomings of tradition firewall and the firewall technology using compound packet filter, proxy service and other technologies as well as the trend of Internet firewall development are aralyzed.