基于专用协议栈的状态检测防火墙  

Stateful inspection firewalls based on special protocol stack

作　　者：林绍太[1] 张会汀[1] 郭锡泉[1] 

机构地区：[1]暨南大学信息科学技术学院,广东广州510632

出　　处：《计算机应用》2004年第10期62-63,66,共3页journal of Computer Applications

基　　金：广东省科技计划项目资助项目 (2 0 0 3C1 0 1 0 3 8)

摘　　要：提出了基于专用协议栈的状态检测防火墙技术,通过模块编程动态的修改了操作系统的网络流程,屏蔽了操作系统对协议数据包的处理,消除了系统的TCP/IP协议栈指纹效应。并对协议栈的IP碎片重组及校验和的算法进行了探讨和改进,在此基础上实现了状态监测技术。Stateful inspection firewalls were based on special protocol stack,which forbad all network operations of the system applications by dynamically modifying the network flow of the operation system with module programming,and obscured the fingerprint of TCP/IP protocol suites. The fragement reassembly algorithm was ameliorated and the fast checksum was deeply discussed,based on which the stateful inspection technology was achieved.

关 键 词：网络安全 TCP/IP协议 状态检测 防火墙 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]