增强型包过滤防火墙规则的形式化及推理机的设计与实现
RULE-FORMALIZATION AND DESIGN & IMPLEMENTATION OF DIANOETIC MACHINE FOR ENHANCED PACKET FILTERING FIREWALLS
-
摘要: 防火墙是一种重要的网络安全技术 .对防火墙的核心技术——规则和推理机进行了研究 ,提出了增强型包过滤防火墙的规则形式化定义、推理机的抽象模型和推理算法 .据此 ,设计和实现了相应的推理机 ,同时给出了防火墙的设计实例 ,以此做为对上述工作的验证 .最后 ,总结了该防火墙的优点 ,并指出了进一步的研究目标Abstract: Rules and dianoetic machines that are the key technologies of firewall are studied in this paper. The rule formalization definition, abstract model of dianoetic machine, and dianoetic algorithm in the enhanced packet filtering firewalls are proposed. The relevant dianoetic machine is designed and implemented accordingly. The research results are validated while the applications of the firewall are illustrated. Finally, the advantages of the firewall are summarized and the research directions in the future are indicated.
下载: