| 基于状态检测的防火墙系统研究 |
| |
| 引用本文： | 刘更楼,丁常福,姜建国.基于状态检测的防火墙系统研究[J].航空计算技术,2004,34(1):122-125. |
| |
| 作者姓名： | 刘更楼 丁常福 姜建国 |
| |
| 作者单位： | 西安电子科技大学,计算机学院,陕西,西安,710071 |
| |
| 摘 要： | 重点讨论了基于状态检测防火墙系统的模型。通过对包过滤机制加入状态检测模块,将状态信息的保留机制与过滤机制结合起来,应用状态迁移分析技术设计状态检测模块,使系统对IP包的转发效率有了较大的提高,并且对于包过滤模型中存在的先天性安全漏洞做了较为完善的弥补。
|
| 关 键 词： | 防火墙 状态检测 包过滤 状态迁移分析 |
| 文章编号： | 1671-654X(2004)01-0122-04 |
| 修稿时间： | 2003年12月15 |
A Study of Firewalls Systems Based on State Inspection |
| |
| LIU Geng-lou,JIANG Jian-guo,DING Chang-fu.A Study of Firewalls Systems Based on State Inspection[J].Aeronautical Computer Technique,2004,34(1):122-125. |
| |
| Authors: | LIU Geng-lou JIANG Jian-guo DING Chang-fu |
| |
| Abstract: | This paper introduces the model of state inspection firewall system. The filter mechanism of state information is combined with its reserved mechanism by adding state inspection module to the package filter mechanism. By designing state detection module with State Transition Analysis Technique, the transmitting efficiency of system to IP package is improved.It is also a relative complete supplement to the security leak existed in the package filter model. |
| |
| Keywords: | firewall sate Inspection package filter state transition analysis |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
