| The fast development of Internent which is tigtghly related to our life causesdiverse network security problems. As an efficient, safe and low cost platform,embedded system can be applied in wide areas including network security.In China，most firewalls belong to hardware firewalls, which are based on IntelX86architecture.These firewalls are based on the same principle and are implementedusing the same method. If thare are defects in the architecture, it will hinder thedevelopment of the product. Experiment results show that promoting the performanceof the hardware and storage capacity will only scratch the surface. The application ofASIC will cause inconvenience, high labour cost and long research cycle, which leadsthe update of antivirus library lags the derivation of viruses.Various factors that inpact netwok safety, convenience and reliability areconsidered in this thesis. Eventually, network virus processor is choosed to handlenetwork traffic, and analyze, mask and filter external data, so as to improve researchefficiency, reducing development cycles. In application, it combines some essentialadvantages of hardware firewall, optimizes operations such as packet filtering,computing and forwarding, enables the analysis of high-speed network traffic data andeventually meets user needs and effective resistance to virus evolution.Combination ofembedded Linux and network processors are the key to this thesis. The core idea of thisnovel firewall is to forbid all the packets, only allow packets that meet the rules to passthrough. The firewall with this policy can provide powerful protection to inter networkwith higher level. This provide steady and reliable support for upper layer softwares.This design is based on the actual needs, in the existing technology are improved.The validation shows that, the firewall has the advantages of simple operation, low costand other characteristics, can effectively reduce the network risk, reduce the cost ofnetwork maintenance. |
PDF Full Text Request