屏蔽子网型防火墙的一种改进方案初探

a Kind of Improvement Scheme of the Shielded-subnet Firewall

屏蔽子网型防火墙是当今应用较为广泛的一种防火墙体系结构。本文重点结合屏蔽子网型防火墙探讨如何在不牺牲成本代价的情况下,获得更多的安全收益。笔者认为,借鉴蜜罐技术的思路,对参数网络进行技术上的改造,使其成为入侵者的“陷阱”,可以更大限度的提高屏蔽子网型防火墙的安全性。

Shielded-subnet firewall is the most widely used firewall structure nowadays. It will be deeply discussed associated with the shielded-subnet firewall that how to get the more safe benefits at less cost in this paper. The safety of shielded-subnet firewall will be enhanced in virtue of the technology of Honey Pot,which can technically rebuild the parameter of the net to make a trap to the aggressor.