数据包的拦截与过滤研究与实现  

Research and Implementation of Packet Capture and Filtering

作　　者：张旭珍[1] 薛鹏骞[1] 贾品贵[2] 

机构地区：[1]华北科技学院,北京东燕郊106101 [2]中国科学院自动化研究所,北京100080

出　　处：《华北科技学院学报》2008年第2期68-70,共3页Journal of North China Institute of Science and Technology

基　　金：华北科技学院科研基金资助项目

摘　　要：数据包的拦截与过滤广泛应用于信息安全产品的研发中,如防火墙、入侵检测系统、病毒防范等。本文介绍了NDIS驱动程序结构,给出NDIS中间驱动程序实现网络数据包的拦截方法;并实现了一个基于规则的过滤算法,在过滤算法中引入了一个分层框架。Network data packet capture and filtering technology is widely applied to the research and development of information security products, such as firewalls, intrusion detection systems, and anti-virus tools. This paper introduces the NDIS driver architecture. Network data packets are captured by NDIS Intermediate driver;A rule-based filtering algorithm is presented in this paper, and a layered filtering framework is included in the algorithm.

关 键 词：NDIS中间驱动程序 包过滤 分层过滤框架 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]