Windows XP包过滤防火墙的设计与实现毕业论文.doc

第 PAGE \* MERGEFORMAT 2 页 Windows XP包过滤防火墙的设计与实现 论 文 摘 要 当今时代是飞速发展的信息时代，计算机与信息处理技术日渐成熟。随着Internet和计算机网络技术的蓬勃发展，网络安全问题现在已经得到普遍中重视。网络防火墙系统就是网络安全技术在实际中的应用之一。本设计实现的防火墙采用IP过滤钩子驱动技术，过滤钩子驱动是内核模式驱动，它实现一个钩子过滤回调函数，并用系统提供的IP过滤驱动注册它，IP过滤驱动随后使用这个过滤钩子来决定如何处理进出系统的数据包。本防火墙由以下几个模版组成：过滤规则添加模块、过滤规则显示模块、过滤规则储存模块、文件储存模块、安装卸载规则模块，IP封包过滤驱动功能模块。用户只需要通过主界面菜单和按钮就可以灵活地操作防火墙，有效地保护Windows系统的安全。 关键词：防火墙；过滤钩子；过滤驱动；包过滤 Design and Implementation of Windows XP Packet Filter Firewall Abstract The present era is the rapid development of the information age,computer and information processing technology is reaching maturity.With the Internet and the rapid development of computer network technology, network security issues are now widely in importance.Network firewall network security technology system is one of the applications in practice.The design and implementation of firewall IP filter hook driver technology, filter hook driver is a kernel-mode driver, which implements a filter hook callback function, and use the IP system filter driver to register it, IP filter driver then use this filter to determine how to hook processing data packets out of the system.The firewall component by the following template: filtering rule module, display module filter rules, filter rules for storage modules, file storage module, the module installed uninstall rules, IP packet filtering driver modules.Users only need to interface through the main menus and buttons have the flexibility to operate the firewall, effectively protect Windows-based system. Key Words: Firewall，filter hook，Filter Driver，packet filtering 目 录 1 引言 1.1 课题背景5 1.2 本课题研究意义5 1.3 本课题研究方法5 2 防火墙概述 2.1 防火墙的定义6 2.2 防火墙的基本策略6 2.3 包过滤防火墙6 2.3.1 数据包6 2.3.2 包过滤防火墙的工作原理7 3 开发工具 3.1 Visual C++ 6.07 3.2 Visual SourceSafe8 4 防火墙系统构成 4.1 需求分析8 4.2 设计思路8 4.3 功能模块构成9 4.4 功能模块介绍9 4.4.1