防火墙技术的应用研究.docVIP

 防火墙技术的应用研究 摘 要 随着互联网的飞速发展，越来越多的企业和用户连接到互联网中。人们在充分享受着互联网所带来的方便和高效的同时，也不断受到各种计算机病毒感染和黑客恶意攻击的侵扰。在网络安全解决方案中，建立或设置防火墙是一个非常关键和有效的环节。而本文则设计和实现了一个面向校园，企业，数据中心级的网关型防火墙,并为它们提供可靠的安全保护。 本文首先论述了防火墙的背景知识，包括防火墙的基本概念和防火墙技术的发展情况等。然后对设计这款防火墙所需要的主要技术进行了详细介绍，包括访问控制列表技术，网络地址转换技术、抗病毒攻击技术、安全域技术、虚拟防火墙技术、与服务器的联动技术、日志记录分析技术等。访问控制列表技术，网络地址转换技术、抗病毒攻击技术能很好的满足校园及企业的需求，而安全域技术、虚拟防火墙技术则对数据中心的安全需求提供了强大的功能支持；日志的记录与查询为整个网络的监控提供了所有信息的记录；与服务器的联动不仅能提供强大的功能扩展，还能减轻防火墙的负担。 在此基础上，以我设计的防火墙为例，从防火墙的各项功能着手，分析并设计防火墙功能的实现方法及相应的软件配置。并通过各项测试来验证防火墙的功能，全文比较完整地叙述了此款防火墙的技术特点及性能。 关键词：防火墙，安全保护，访问控制列表技术，虚拟防火墙 The Research of Firewall Technology Application ABSTRACT With the rapid development of Internet, many enterprise users and single users connect to it. People enjoy the convenience and great efficiency brought by the Internet, at the same time, their computers are continually suffered from many kinds of computer virus and hackers’ attack. One of the effectual and important solutions for network security is to set firewall. And the paper is to design and implement a gateway firewall for the campus, enterprise and the data center. The firewall can provide them with reliable security protection. This paper first discusses the background of firewall, including the basic notion of firewall and the situation about the development of firewall technology. Then it specifies the main technologies to design the personal firewall, such as access control list technology, network address translation technology, antiviral attack technology, security domain technology and virtual firewall technology, the servers and linkage technology, log analysis technique and so on. Access control list technology, network address translation technology, antiviral attack technology can well meet the demand of campus and enterprise; the security domain technology and the virtual firewall technology providea a powerful support for the security requirements of data center; Log records for the entire net