深度内容检测防火墙系统设计

Design of deep content detection of firewall system

所论述的“深度内容检测防火墙系统”是在新一代信息安全系列(TS8xxx)芯片基础上进行设计开发的,目标是在专用防火墙ASIC芯片TS8210及IBM POWERPC 405处理器组成的SSDL_L硬件平台上,设计一个具有web配置管理界面、规则库存储和日志管理功能,并能够实现包过滤器与应用层协议内容检测双重功能的新型深度内容检测防火墙系统。

This paper introduced the design and development of the ＂Deep Content Detection of Firewall System＂ （D.P.D.F.S） based on a new serial ASIC chipset TS8xxx. The target of the subject is to design a new type of hardware firewall on the plaffform SSDLL which is consisted of ASIC chipset TS8210 and IBM POWERPC 405 CPU. This firewall has the following functions：packet filtering, content detecting on the protocol of application layer, as well as web configuration management interface, storage of rules, and log management.