计算机网络安全中的防火墙技术研究

The Network Firewall of Computer Security Technology

介绍一些经常性的网络安全问题,以及用一种相应的防御对策--网络防火墙,它技术的核心思想是在不安全的网络环境中构造一个相对安全的子网环境.讨论了实现防火墙的两种主要技术手段:一种是基于分组过滤技术(Packet filtering),它的代表是在筛选路由器上实现的防火墙功能;一种是基于代理技术(Prox-y),它的代表是应用层网关上实现的防火墙功能.参5.

The core thought of firewall technology is to construct a structure relative security sub - net environment in the unsafe Interact environment. This article introduced the basic concept of firewall technology and corresponding strategies to it. It including two main technical method of the firewall ： One is filters the technol- ogy based on the grouping （Packet filtering） whose representative is the firewall function which realizes on the screening router; the other is based on the proxy technology （Proxy） whose representative is the firewall function which realizes on the application level gateway. 5refs.