基于Ptolemy II嵌入式防火墙系统级设计与仿真研究

An Embedded Firewall System Design Based on Ptolemy II

传统的防火墙难以抵御网络内部用户的攻击,而分布式防火墙又过分依赖于主机的操作系统,嵌入式防火墙研究已成为当前防火墙研究主流。本文提出了一种嵌入式防火墙的体系结构,介绍了嵌入式系统级建模仿真平台Ptolemy II,在该仿真平台上进行了嵌入式防火墙的建模,并对系统模型中的RTOS实时调度和包过滤算法等主要部分进行了仿真和分析。

Traditional firewall has failed to resist the attack from the inside network and distributed firewall excessively relies on the host operation system, so embedded firewall become the key focus of the current network security research. The paper presents architecture of embedded firewall. In addition, it describes the embedded system modeling and simulation platform Ptolemy II and designs an embedded firewall model based on it. At last it gives the simulation of RTOS real time scheduling and packet filter algorithm.