摘要
本文在传统网络层防火墙基础上实现了应用层防护网关,此网关对应用层常用协议进行分析和对执行语句进行还原并过滤,实现了网络各层综合防护。对执行语句与常见攻击特征字段进行模式匹配是应用层过滤最有效的手段,但模式匹配的效率是防护网关性能的主要瓶颈。本文研究了BM算法的实现机理,对传统的BM算法进行了改进;在此应用层防护网关中采用改进后的BM算法很好地提高了装置吞吐量、提升了系统效率。
An Application Protection Gateway was realized based on the traditional network-layer firewall, some general application layer protocols were analyzed and the operating strings were reverted and filtered, so that most of the network layers were defended. The most available method to filter at application layer is to match the attack character pattern with the operating strings, but the pattern matching＇s efficiency is the bottleneck of the Protection Gateway. In this paper, the mechanism of BM algorithm was investigated, an improved BM algorithm was also proposed, The application of this algorithm in the Application Protection Gateway can greatly improve the set＇s throughput and the system efficiency.
出处
《微计算机信息》
2010年第21期73-75,111,共4页
Control & Automation
关键词
防火墙
应用层防护网关
模式匹配
BM算法
firewall
application protection gateway
pattern matching
BM algorithm
