本文已被:浏览 2331次 下载 3175次
Received:March 25, 2010 Revised:April 27, 2010
Received:March 25, 2010 Revised:April 27, 2010
中文摘要: 随着网络应用的不断发展,网络安全显得越来越重要。基于X86架构的边界防火墙成本较高,且难以遍布网络的每一个终端设备,无法构建全方位的安全防护网络。本文针对以上问题,设计了一种基于S3C2440嵌入式IPv6防火墙, 并且提出了状态跟踪与智能包过滤相结合的动态包过滤方案。该方案通过智能访问控制技术优化包过滤规则集,从而提高了防火墙的吞吐量和安全性。
Abstract:With the continuous development of network applications, network security becomes increasingly important. Boundary firewall based on x86 architecture is expensive and difficult to protect each terminal equipment .It can not build comprehensive security network. So this paper designs an embedded IPv6 firewall based on S3C2440 processor to solve the problems. This paper also gives a solution which combines SPI ( Stateful Packet Inspection) and intelligent packet filtering into dynamic packet filtering mechanism. The solution optimizes packet filtering rule set by using intelligent access control technology. It also enhances the throughput of firewall and security.
keywords: firewall embedded system IPv6 intelligent access control technology dynamic packet filtering network security
文章编号: 中图分类号: 文献标志码:
基金项目:湖北省自然科学基金(2009CDB082)
Author Name | Affiliation |
苏义鑫 | 武汉理工大学 自动化学院 湖北 武汉 430070 |
王树佳 | |
王雁 |
Author Name | Affiliation |
苏义鑫 | 武汉理工大学 自动化学院 湖北 武汉 430070 |
王树佳 | |
王雁 |
引用文本:
苏义鑫,王树佳,王雁.基于S3C2440的嵌入式IPv6防火墙设计.计算机系统应用,2010,19(12):251-254
.Design of Embedded IPv6 Firewall Based on S3C2440.COMPUTER SYSTEMS APPLICATIONS,2010,19(12):251-254
苏义鑫,王树佳,王雁.基于S3C2440的嵌入式IPv6防火墙设计.计算机系统应用,2010,19(12):251-254
.Design of Embedded IPv6 Firewall Based on S3C2440.COMPUTER SYSTEMS APPLICATIONS,2010,19(12):251-254