基于LSP与NDIS驱动防火墙的设计与实现  

Design and Implementation of Firewall Based on LSP and NDIS

作　　者：梅足辉 MEI Zuhui(School of Mechanical Engineering,Jiangsu University of Technology,Changzhou 213001,China)

机构地区：[1]江苏理工学院机械工程学院,江苏常州213001

出　　处：《现代信息科技》2020年第12期140-141,144,共3页Modern Information Technology

摘　　要：信息时代个人电脑成为了生活的重要组成部分,对个人防火墙的研究对保护信息安全有重要的现实意义。目前防火墙大多在驱动层面使用包过滤技术,对数据的封包处理能力有限,并且无法接触应用层信息,过滤匹配算法也大多为线性时间算法。为了提高防火墙的过滤能力,文章提出加入LSP过滤技术对网络封包进行全面深度过滤,并改善了匹配算法,设计了一款内核与应用层双重过滤的驱动防火墙。经过测试,它对网络数据包有强大的过滤能力。Personal computer plays an important role of life in the information age.Therefore it is important and realizable for us to research the firewall.At present,most firewalls use packet filtering technology at the driver level,which has limited processing capacity for data packets,and can not contact the application layer information,and most of the filtering and matching algorithms are linear time.In order to improve the filtering ability of firewall,LSP filtering technology is proposed to filter network packets comprehensively and deeply,and the matching algorithm is improved.A driver firewall with dual filtering of kernel and user layer is designed.After testing,it has a strong filtering ability for network packets.

关 键 词：网络驱动接口规范 防火墙 LSP 包过滤 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]