摘要
随着网络应用的不断发展,网络安全显得越来越重要。基于X86架构的边界防火墙成本较高,且难以遍布网络的每一个终端设备,无法构建全方位的安全防护网络。本文针对以上问题,设计了一种基于S3C2440嵌入式IPv6防火墙,并且提出了状态跟踪与智能包过滤相结合的动态包过滤方案。该方案通过智能访问控制技术优化包过滤规则集,从而提高了防火墙的吞吐量和安全性。
With the continuous development of network applications, network security becomes increasingly important. Boundary firewall based on x86 architecture is expensive and difficult to protect each terminal equipment .It can not build comprehensive security network. So this paper designs an embedded IPv6 firewall based on S3C2440 processor to solve the problems. This paper also gives a solution which combines SPI （ Stateful Packet Inspection） and intelligent packet filtering into dynamic packet filtering mechanism. The solution optimizes packet filtering rule set by using intelligent access control technology. It also enhances the throughput of firewall and security.
出处
《计算机系统应用》
2010年第12期251-254,共4页
Computer Systems & Applications
基金
湖北省自然科学基金(2009CDB082)
关键词
防火墙
嵌入式系统
IPV6
智能访问控制技术
动态包过滤
网络安全
firewall
embedded system
IPv6
intelligent access control technology
dynamic packet filtering
network security
