基于集群的分布式微防火墙系统结构

The architecture of the distributed micro-firewall for cluster

针对现有网络安全系统中存在的问题 ,提出了一种自免疫的分布式微防火墙结构 .在该体系结构中 ,微防火墙和微入侵检测系统运行在受保护子网的各个结点上 ;移动代理系统和RMI方式实现安全策略的发布和动态更新 .本系统能提供细粒度的安全保护 ,提高了系统的可扩展性和安全性 .

In view of the problems existing in network security systems available, a self immune distributed micro firewall architecture is presented. In the architecture, the micro firewall is built with packet filters at the protected hosts. A micro intrusion system can quickly respond to both the external and internal attacks and allow for adaptive change in the security policy in the protected network. The mobile agent system and RMI can be used to implement dynamic security policy reconfiguration. These mechanisms can provide dual fine grain protection and enhance the system scalability and security.