摘要
With the improvement of network,security becomes more importable. In market,firewall is one of the importable security products. Firewall can prevent your network from being attacked,for example IP snoop,mail-spm etc. But firewall can not prevent itself from the action which attacks the firewall's code and firewall system. So we add integrity services into firewall system. In firewall system,every module does self-check integrity before it is loaded by system. A bilateral authentication procedure is designed for two modules which call each other to establish trust in the identity and integrity of each other. And it is still necessary to ensure secure linkage between the two parties. Firewall system establishes on the security data architecutre.
With the improvement of network, security becomes more importable. In market ,firewall is one of the importable security products. Firewall can prevent your network from being attacked,for example IP snoop,mail-spm etc. But firewall can not prevent itself from the action which attacks the firewall's code and firewall system. So we add integrity services into firewall system. In firewall system,every module does self-check integrity before it is loaded by system. A bilateral authentication procedure is designed for two modules which call each other to establish trust in the identity and integrity of each other. And it is still necessary to ensure secure linkage between the two parties. Firewall system establishes on the security data architecutre.
出处
《计算机科学》
CSCD
北大核心
2001年第8期56-59,共4页
Computer Science
关键词
防火墙
网络安全
计算机网络
安全数据结构
Firewall,Self-check integrity, Bilateral authentication,Secure linkage ,Security data archi-tecture