【摘要】 提出一种新型的可嵌入内核的动态防火墙模型,描述了一个基于该模型的安拓防火墙系统的组成结构和实现机制。讨论了该系统实""现中的关键技术及其解决方法,包括:状态检测技术、动态规则技术、可动态加载内核模块技术及自身安全保护设计等。归纳了该系统的特点及应用前景,并总结了今后的研究方向。更多还原

【Abstract】 A new model is proposed for the dynamic firewall system based on the embedded kernel in this paper. With this model, the components and implementation of a iTOP firewall system are described. Some key technical problems and their solutions, which includethe state inspection technique, dynamic rule technology, loadable kernel modules technology , and the design of system security are also discussed. The characteristic, consistency ,the application prospect and the research direction in the future of this system are also summarized.更多还原