Research On In-depth Packet Detection Of Firewall

In-depth packet detection is brought forward with the development of network security and shows the future of main firewall technology.On the base of studies of main in-depth packet detection technology, a model of in-depth packet detection based on pattern matching is given, and the correlative pattern matching algorithms are suggested. Firstly, the advantage and disadvantage of the three traditional techniques, which are packet filter, state detection and application proxy, are analyzed. Discuss the new intelligent firewall technology and simply introduce the intelligent filter technology. Secondly, describe packet filter and stream filter techniques in detail. Give an in-depth packet detection model based on pattern matching, which uses for reference to active detection trait of Intrusion Prevention System, and analyze the whole frame and structure of components. Finally, a newly pattern matching algorithm is suggested and the idea behind algorithm is partition and uses of hash function after analyzing the basic algorithm. The time space of the new algorithm is O (m + n), here m, n denote the length of string and text respectively. The new linear algorithm is suitable for in-depth packet detection of firewall.