基于NDIS-HOOK与SPI的个人防火墙设计

Design of individual firewall based on NDIS-HOOK and SPI

当前个人网络安全产品中,个人防火墙是一个非常重要的网络安全产品。利用NDIS-HOOK与SPI相结合在Windows下设计了一个基于NDIS-HOOK与SPI的个人防火墙。其中,在应用层利用SPI进行封包来过滤各种应用程序,而在核心层利用NDIS-HOOK来过滤各种非Socket通信的数据包,实现底层的数据包的捕获,从而能更好地过滤数据。

Individual firewall is a very important product of network security. The research makes use of NDIS-HOOK and SPI to design an individual firewall under Windows. In application layer, it employs SPI to envelop the packages to filtrate all kinds of application, and in core layer, it employs NDIS-HOOK to filtrate the data packages of non-socket corresponding, and capture data packages, so as to improve the filtration of the data.