论文部分内容阅读
在网络技术飞速发展的今天,黑客和病毒每年给互联网用户带来了巨大的损失,个人防火墙应运而生。个人防火墙一般都是采用包过滤的方式来实现的。包过滤型防火墙如果在应用层过滤数据包,因不能捕获所有的数据包,安全性较低;而工作在NDIS层的包过滤型防火墙,则能对所有数据包进行过滤,安全性较好。文章设计并实现了一个包过滤型防火墙系统,在Windows内核中截获数据包,并通过采用多线程等技术进一步优化了包过滤的性能。
Today, with the rapid development of network technology, hackers and viruses have caused huge losses to Internet users every year. Personal firewalls have emerged. Personal firewalls are generally implemented using packet filtering. If the packet filtering firewall at the application layer, because it can not capture all the packets, less security; and work in the NDIS layer packet filtering firewall, you can filter on all packets, better security. This paper designs and implements a packet-filtering firewall system, intercepts data packets in the Windows kernel, and further optimizes the performance of packet filtering by adopting technologies such as multi-threading.