| 状态检测防火墙技术原理研究与安全性改进方法 |
| |
| 引用本文： | 李长春.状态检测防火墙技术原理研究与安全性改进方法[J].绵阳师范学院学报,2012,31(8):80-86. |
| |
| 作者姓名： | 李长春 |
| |
| 作者单位： | 滁州职业技术学院,安徽滁州,239000 |
| |
| 基金项目： | 安徽省2010年高等学校省级质量工程特色志业 |
| |
| 摘 要： | 通过对传统包过滤防火墙系统的缺陷分析，阐述了状态检测技术的实现过程，提出在状态检测技术中利用动态管理超时机制实现DoS攻击防御和带宽合理分配。并在实验环境中对状态检测防火墙系统的安全性进行了测试。实验结果表明，其对IP层及高层协议内容进行检测分析，能较好地解决包过滤防火墙安全性缺陷。
|
| 关 键 词： | 状态检测 防火墙 状态表 规则表 超时值 |
On Technology Principle of State- detecting Firewall and its Security Improvement |
| |
| LI Chang-chun.On Technology Principle of State- detecting Firewall and its Security Improvement[J].Journal of Mianyang Normal University,2012,31(8):80-86. |
| |
| Authors: | LI Chang-chun |
| |
| Institution: | LI Chang-chun(Chuzhou Vocational and Technical College,Chuzhou,Anhui 239000) |
| |
| Abstract: | This paper is to,analyzing of the defects of the traditional packet filtering firewall system,introduce the implementation process of the state detection technology,propose to use dynamic management mechanism of time-out value of state inspection firewall to realize DoS(denial of service) attack defense and reasonable bandwidth allocation,to test the security of state inspection firewall in the simulation environment.Experimental results show that the detection and analysis of the IP layer and the high-level agreement can better solve security defects of the packet filtering firewall. |
| |
| Keywords: | State detection firewall state table rule table time - out value |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
