高性能应用层代理防火墙系统的设计与实现

The Design and Implementation of High Performance Application Layer Proxy Firewall

随着Internet的广泛应用,网络安全越来越受到人们重视。对企业来说,有了防火墙和防病毒系统,网络似乎就可以安全了,但事实并非如此,由单纯防火墙和防病毒系统组成的安全系统还存在很多不足,表现在不能防御新型病毒和新型攻击,尤其不能防御通过Web网页、Web邮件、聊天软件、P2P传播的新型威胁。本文分析了传统防火墙存在的不足,提出了“基于NAT的高性能应用层代理防火墙系统”的新的方案,并给出了设计思想和实现方法。

With the widespread of Internet, network security is becoming more and more important. Some enterprises consider that their networks secure if they are equipped with a firewall or anti-virus system. In fact, lots of limitation exists in the security system constituted only by a single firewall or anti-virus. For example, they can not defend from a new type of virus or attacking, especially some new threats through Web Page, Web Email, chatting software or P2P transfer software.The thesis analyzes the shortcomings of traditional firewall and provides a new solution for high performance application layer proxy firewall based on NAT.