具有系统防御功能的新型主机防火墙系统设计

Design of a new firewall on host computer with the function of system defense

提出一种新型的主机防火墙体系的设计,在该体系中融合了操作系统防护和数据防护策略,在一定程度上提高了用户数据的安全性,完善了防火墙的功能.在防火墙的包过滤器中增加了专家系统,采用推理机来动态地实现规则生成,以降低系统资源的消耗.

This paper put forward the design of a new firewall on host computer which had the function of guarding the operate system and protecting the data. It improved the security of user data and made the firewall more stronger. This system added expert system to the package filter of the fire wall and adopted reasoning machine to achieve the rule creation, which can reduce the consume of system resource.