基于netgraph机制的内容过滤防火墙研究及应用-计算机软件与理论专业论文.docxVIP

基于nctgraph机制的内容过滤防火墙研究及应用容过滤防火墙体系结构运用于该系统中，以监控同～网段内的数据流量，记录并 基于nctgraph机制的内容过滤防火墙研究及应用 容过滤防火墙体系结构运用于该系统中，以监控同～网段内的数据流量，记录并 分析http协议的url地址的非法数据信息以及处理其他各种类型的攻击信息， 以达到实验室测试的目的。 总之，本论文针对防火墙的体系结构的研究和应用方面，作了认真而有益的 探索，不仅在netgraph机制的应用角度提出了自己的新的研究思路和见解，而 且结合SGDS产品，将其成功的扩展和应用到SGDS产品中。这不仅在内容过滤防 火墙的实现方面提出了新的方法，而且在数据包的底层处理方面也有一定的参考 价值。 关键词：防火墙；体系结构；内容过滤；netgraph；操作系统内核 Ⅱ 基于netgraph机制的内容过滤防火墙研究及应用 基于netgraph机制的内容过滤防火墙研究及应用 Abstract ABSTRACT Along with the development of explosion type of internet，the question of network security causes common people to pay close attention to more and more． There is potential safety hazard more in the network at present．In order to strengthen the secur时ofthe network,university and seientifie research institution invest heavy manufacturers and fmancial reSOUECCS in safe research．Among network case study, security,performance and match afe three very important indexes．Guaranteeing the systematic security is the focus question ofstudying at present． Mainly in the system structures offirewall the thesis carry on the deep theoretical research．We combine and take a sniffat the concrete designing requirement ofSGDS (Gateway Design System for firewall of Sniffer)system．The structure based on netgraph mechanism apply to SGDS filter flow analyze system． This thesis is to one ofthe important research subject in the safe practice ofthe network．At first we have carried on the deep historical background and systematic retrospect of the technology of firewall,secondly we consider the content—based filtering system offirewall as the cutting point，and have analyzed further the research general situation of content filters and development of the firewall,lastly the thesis amplify out the research subject ofthis text on the basis ofthis．This thesis has carried on deep research in following several cases．The main contribution can be summarized as follows： The thesis have carried on deep research to netgraph mechanism under FreeBSD operating system at first,then has