Research And Implementation Of Personal Firewall Based On Windows

With the rapid development and application of Internet, PC has brought revolutionary change to people's daily life. At the same time, the security problem threatens every network user. Firewall has now become a main method to prevent network hosts from attacking. The main purpose of this thesis is to carry on research of personal firewall based on Windows platform and its implementation.One of the core technologies of personal firewall is how to capture network packets. This thesis focuses on research of the Windows network architecture and the principle of NDIS (Network Driver Interface Specification). It provides a combination method, which base on Windows kernel mode and user mode respectively, to complete packet filtering after comparing popular firewall products in today's market. According to the new method of packet capturing, an experimental system was developed. The system uses new method to capture packet, which bases on Windows Socket 2 SPI (Service Provider Interface) and NDIS HOOK. It avoids the defect of single way to capture packet and, can capture all the packets in theory.Experimental results show that experimental system based on the new method of packet capturing is effective and stable.