基于arm的嵌入式防火墙的研究与实现-计算机应用技术专业论文.docxVIP

阳mm咱州州川nww脚脚哼W 阳mm咱 州州川nww 脚脚哼W ， 酬酬川AMM 州 州 唰aaT 恻川川OO M唰m唰a川- mY 摘要 随着计算机应用的普及和互联网络的发展，人们对网络安全越来越重视， 作为网络安全技术之一的防火墙与此同时得到了很好的发展。但传统的边界防 火墙只在网络边界进行保护，不能保护网络内部通信，而且一旦绕过就将整个 网络暴露于外。 嵌入式防火墙的网络安全策略不依赖于网络拓扑结构，克服了边界防火墙 依赖网络拓扑结构及对网络性能影响较大等问题。每台主机都不信任任何其他 主机，对流经的数据流都进行过滤和保护，克服了边界防火墙无法防范内部攻 击及单点失效等问题。 本文首先对防火墙的研究现状进行了介绍:其次对基于 ARM 微处理器的嵌 入式防火墙进行了总体设计;再次设计并实现了基于 ARM 的嵌入式防火墙的硬 件及软件。整个防火墙系统以 S3C44BOX 为主处理器，移植了 U-Boot 、flClinux 操作系统、民omfs 文件系统、 Freeswan 及 iptables ，编写了网卡驱动程序。为方 便使用，还编写了在主机操作系统 windows 上运行的防火墙配置器，构建了日 志服务器。然后，对嵌入式防火墙的功能进行了测试，测试结果显示:嵌入式 防火墙能对网络通信进行很好的过滤及加密保护。最后对全文进行总结，并提 出一些在本文基础上值得研究的问题。 关键词 z 嵌入式防火墙; ARM; 包过滤 ABSTRACT ABSTRACT wi白白e popularization of computer applications and 伽 rapid development of network， the network security is becoming more and more im阴阳nt. At 由e same time，network frrewok as one of the network security technologies has been developed great1y too. But 也.e traditional boundary network firework only works on the network boundary，which can not protect the communication in the inside network， and the whole inside netwok will be exposed once 也.e traditional boundary network firework f础Is. Network security policy of Embedded Firewall does not depend on network topology，which overcomes 由e disadvantage of the traditional boundary network frrework relying on the network topology and the disadvantage of impacting on network p衍fonnance grlωl弘 Each host does not trust any 0由.er host， and all of the da阳附eam wi1l be filtered and protected ，which overcomes the problems those the traditional boundary network frrework can not pr创ect against interna1 attacks and the single point of failure. Firstl乳白e research background of the network firewall is introduced in 白is paper; se∞，ndly，propose the overall design of the embedded firewall which based on ARM processor; 也irdly，也e hardware and so位ware of the embedded firewall which based on ARM have been designed and been implemented respectively. The firewall system use S3C44BOX 即由e cen