基于LSP与NDIS驱动防火墙的设计与实现

Design and Implementation of Firewall Based on LSP and NDIS

信息时代个人电脑成为了生活的重要组成部分,对个人防火墙的研究对保护信息安全有重要的现实意义。目前防火墙大多在驱动层面使用包过滤技术,对数据的封包处理能力有限,并且无法接触应用层信息,过滤匹配算法也大多为线性时间算法。为了提高防火墙的过滤能力,文章提出加入LSP过滤技术对网络封包进行全面深度过滤,并改善了匹配算法,设计了一款内核与应用层双重过滤的驱动防火墙。经过测试,它对网络数据包有强大的过滤能力。

Personal computer plays an important role of life in the information age.Therefore it is important and realizable for us to research the firewall.At present,most firewalls use packet filtering technology at the driver level,which has limited processing capacity for data packets,and can not contact the application layer information,and most of the filtering and matching algorithms are linear time.In order to improve the filtering ability of firewall,LSP filtering technology is proposed to filter network packets comprehensively and deeply,and the matching algorithm is improved.A driver firewall with dual filtering of kernel and user layer is designed.After testing,it has a strong filtering ability for network packets.