Research And Realization Of Personal Firewall Under Windows

This thesis focuses on the research of the personal firewall and its realization under Windows. The first part discusses the security problem that personal computer users may encounter and the bad message on Internet that Nonage may face, concluding the necessity of the personal fire wall design. The second part discusses the definition of network security and the concept of the personal fire wall. The third part discusses the principle and methods of the applied program accessing to network in the environment of Windows, analyzes the ways the personal fire wall captures data package and introduces the SPI and NDIS HOOK. The fourth part designs the personal fire wall from the total top, dividing it into three pieces- core layer filter module, application layer filter module and user interface module. The fifth part designs in detail the log document construction of the personal fire wall. The sixth part designs in detail the applied layer data package filter module, including the web page contents filter module, application filter module and web site filter module and designs ICMP data package filter module , net neighbor filter module, etc. in the core layer module. Finally, the function of the realized personal fire wall is tested, the result is analyzed and some proposals are put forward for further research.