一种防窃密个人防火墙的设计与实现  

Design and Implementation of a Personal Firewallanti Stealing Information

作　　者：张栋华 张成 王海涛[2] 

机构地区：[1]济南军区72671部队 [2]解放军理工大学通信工程学院

出　　处：《网络安全技术与应用》2005年第5期61-62,共2页Network Security Technology & Application

摘　　要：个人防火墙是保障桌面系统安全的一种有效手段。针对日益严重的网络窃密,本文设计并实现了一种防窃密个人防火墙。在内核模式下探索、使用了未公开的NDISHook底层驱动开发技术,提高了健壮性。该防火墙嵌入了基于网络的入侵检测模块,并为主机入侵检测提供了响应接口,增强了防窃密功能。Personal firewall is an effective means to secure the desktop system. Aiming at the serious problem of stealing information through the Internet, this paper represents the design and implementation of a personal firewall anti stealing information. We explore the unknown NDIS Hook driver development technology in kernel mode to improve its robustness. This firewall is embedded with NIDS module and also provides interface to HIDS so it can prevent suspected processes from sending secret data.

关 键 词：个人防火墙 设计与实现 窃密 入侵检测模块 系统安全 内核模式 NDIS 开发技术 HOOK 基于网络 健壮性 桌面 接口 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.01[自动化与计算机技术—计算机科学与技术]