摘要： 给出了一种嵌入式系统总线防火墙模型，在系统底层实现入侵免疫功能。通过引入嵌入式系统柔性总线并对其进行形式化数学描述，实现具有通用性的底层架构，在此基础上采用正向规则映射思想建立防火墙规则。实验表明，该防火墙具有良好的可移植性和高入侵识别率。

关键词: 总线防火墙, 嵌入式系统柔性总线, IP核, 正向规则映射

Abstract:

This paper proposes a bus firewall model for embedded system, which has built the intrusion immunity function on the system bottom frame. After importing the embedded system flexible bus and describing it with formalization mathematical method, a universal bottom frame is acquired. Based on this work, the paper adopts a positive rule mapping idea to establish the firewall rules. Experiments demonstrate that the firewall has good transplantability and high intrusion recognition rates.

Key words: bus firewall, embedded system flexible bus, IP core, positive rule mapping

中图分类号: 

• TP393