Abstract: A new model is proposed for the dynamic firewall system based on the embedded kernel in this paper. With this model, the components and implementation of a iTOP firewall system are described. Some key technical problems and their solutions, which includethe state inspection technique, dynamic rule technology, loadable kernel modules technology , and the design of system security are also discussed. The characteristic, consistency ,the application prospect and the research direction in the future of this system are also summarized.

摘要： 提出一种新型的可嵌入内核的动态防火墙模型,描述了一个基于该模型的安拓防火墙系统的组成结构和实现机制。讨论了该系统实""现中的关键技术及其解决方法,包括:状态检测技术、动态规则技术、可动态加载内核模块技术及自身安全保护设计等。归纳了该系统的特点及应用前景,并总结了今后的研究方向。

关键词: 状态检测, 动态规则技术, 可动态加载内核模块, 包过滤, 代理服务

CLC Number: 

• TP393.08