基于Winsock2 SPI的主机访问控制应用

Access control application of host based on winsock2 SPI

网络信息技术的发展促使通信安全要从原来的注重单一的网络层安全到进一步同时注重基于主机的安全。首先分析在Windows下应用层的服务提供接口(SPI)的模型结构[2],包括Winsock2程序内部的功能层次关系,并以SPI技术来截获应用层数据封包,结合访问控制来加强网内主机间通信安全。具体从进程、IP地址、socket端口、数据封包内特定关键词分析、对数据封包的加密认证等几个方面提出了安全主机通信的技术途径,阐述了网络主机访问控制的技术框架,最后给出程序流程的设计实现。

The development of network and information technology drives the security research based on both network and hosts more than on single network. The model of windows SPI technology was analyzed, including the inner mechanism of the winsock2 application, with which packets in the application layer were captured. By combining the access technology with SPI, the communication security in a network was enhanced. The secure hosts＇communication was put forward by means of control of the process, IP address, port, keywords in the application packet and encryption of the packet, and a fi＇amework was given accordingly. Finally, an authentication implement of secure access was out forward between hosts.