Internet防火墙及其发展趋势  

A TREATISE ON THE TREND OF INTERNET FIREWALL DEVELOPMENT

作　　者：李海泉[1] 李刚[2] 

机构地区：[1]西安石油学院计算机系,西安710065 [2]西安交通大学管理学院,西安710049

出　　处：《计算机应用与软件》2002年第11期15-18,55,共5页Computer Applications and Software

摘　　要：本文叙述了Internet来自外部、内部、硬件、软件方面的十种安全威胁和攻击,给出了防火墙的限制、隔离、筛选、过滤和屏蔽作用,介绍了防火墙的六种基本结构类型,论述了过滤路由器、双宿主主机、主机过滤、过滤子网和吊带式五种安全结构,分析了传统防火墙的七种不足,给出了目前防火墙混合应用包过滤技术、代理服务技术和其它一些技术的发展趋势。In this paper, ten sorts of internal and external threats and attacks upon the Internet are summed up. The functions of the limitation, sep-aration, screening ,filtering and shielding methods of Internet firewall are presented.The six basic structures of firewall and the security architectures of filter router,double hosts,hosts filter,filter sub- network and gallows firewall are introduced here.Finally,the seven shortcomings of tradition firewall and the firewall technology using compound packet filter, proxy service and other technologies as well as the trend of Internet firewall development are aralyzed.

关 键 词：INTERNET 防火墙 体系结构 发展趋势 计算机网络 子网过滤器 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]