分布式防火墙策略分发与分类研究计算机应用技术专业论文.docxVIP

湖北工业大学硕士学位论文Abstract 湖北工业大学硕士学位论文 Abstract In a typical distributed firewall model。the definition and distilbution of policies are managed by the policy control center．With the enlargement of the network．the load of the policy control center iS increasing，at the same time，the definition of distilbuted firewall rules become more and more complex，the policies will be easily abnormal and the whole network will become vulnerable to the safety hidden dangers if the definition and distribution of the policies arc in the least bit of carelessness．Therefore。the research on the classification and distilbution of distilbuted firewall is important for the development of its technology． This Paper first analyses and studies on the design and the implementation of the distributed firewall system models，gives a conclusion on the key technologies of distributed firewall implementation，achieve a specific analysis of the policy distribution technologies，and points out that the current technologies of policy distilbution have flaWS and imperfections．The paper proposes a three．tier distributed firewall model which introduces the concept of clustering firewall that is used mainly tO apply the policies and the certificates for host firewaUs．This model iS effective sharing the load of the policy control center，solving the problem of the chain jam and eliminating performance bottlenecks．And the expansion of clustering firewall functions iS made． Based on the new model，the‘‘Push’’，‘‘Get’’and‘‘Search’’policy distribution mechanism is#ven to ensure the time and effectiveness of policy distribution，and the detail implementations of each policy distilbution method are made．Considering the distributed heterogeneous platforms，this paper chooses XML to describe the policy of distributed firewalls，then analysis and study the principle of policy distribution and technical feasibility based on SQ敞． Secondly,in view of the idea of policy classification based on the domain which scholars put forward，t