摘要： 对现有安全技术普遍存在的若干隐患与不足进行了深入的探讨，并提出了一种用于构筑安全内部网的新型体系结构一嵌入式防火墙系统（EFS），该模型以Kerberos认证协议为核心，并集授权、安全数据传输和审计等机制于一体。此外，由于EFS在网络层上设计并实现，这就避免了在各个应用程序中分别考虑安全问题；从而形成了一套透明的网络安全基础设施。

关键词: 网络安全, 防火墙, 认证, Kerberos协议, 服务器, 密钥, 包过滤, 网关, 状态检测, 安全策略

Abstract: As well as various deficiencies of the prevalent security technologies and measures, this paper intends to present a neotericarchitecture of network security - Embedded Firewall System'(EFS). This model, based on the Kerberos protocol, proffers a comprehensivesecurity solution integrated primary asPects of network security. It includes user identification authentication, access control, authorization,confidentiality (encryption). audit and the list goes on. Besides, due to the adoption of the Kerberos, strong scalability has been achieved.What's more, since EFS implements the Kerberos on the IP layer, it avoids integrating Kerberos into applications and a transparentinfrastructure has come into existence.

中图分类号: 

• TP393.08