基于IXP2800和VxWorks的嵌入式病毒防火墙实现  

Implementation of embedded anti-virus firewall based on IXP2800 and VxWorks

作　　者：杨黎斌[1] 慕德俊[1] 蔡晓妍[1] 

机构地区：[1]西北工业大学自动化学院,西安710072

出　　处：《计算机应用研究》2008年第5期1560-1562,共3页Application Research of Computers

基　　金：国防基础科研资助项目(C2720061361)

摘　　要：针对隐蔽在网络流量中的攻击,提出了基于Intel IXP2800网络处理器和VxWorks的嵌入式病毒防火墙(embedded anti-virus firewall)实现方案。该方案将硬件包过滤技术与应用层病毒实时防护相结合,底层数据包的实时响应、过滤转发等处理均由IXP2800的微引擎完成,而使XSCALE主处理器更专注于高层协议的病毒扫描过滤。实验数据表明,这种实现方案运行稳定,具有良好的性能指标。Focusing on the attack hided in network data stream, this paper proposed a novel architecture for embedded antivirus firewall based on IXP2800 and VxWorks. The architecture included two sublayers： low hardware packet filtering layer and real-time anti-virus application layer. The former was responsible for processing of low layer packets, such as real-time responsing, filtering and forwarding, these functions were accomplished by the micro engine of IXP2800. As for anti-virus application layer, the XSCALE main processor was applied to be dedicated to scanning and filtering virus bided in high layer. The experimental results show that the architecture can work steadily and efficiently.

关 键 词：嵌入式病毒防火墙 IXP2800 硬件包过滤 病毒防护 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]