【摘要】 提出一种多级过滤防火墙系统的设计方案,并在NT内核的Windows平台上实现了该方案。通过截取网络数据包,在操作系统内核层和用户层上实现多级过滤。对应用程序进程的网络访问进行监控,并在应用层对数据包的内容进行过滤,有效地提高了主机防火墙系统的安全性。更多还原

【Abstract】 It was proposed a designing plan to Multi-level Filter of Firewall system, implemented on the NT-kernelWindows platform. By hooking the data package of network transmission, it was realized a multi-level package filtering inboth kernel mode and user mode. Besides, it was also monitored the network access from application process and filtered thecontents of the data packets. This measure improved the security of the host firewall system effectively.更多还原