The Research And Realization Of Personal Firewall Based On Windows

With the rapid development of Internet, many enterprise users and single users connect to it. People enjoy the convenience and greatefficiency brought by the Internet, at the same time, their computers are continually suffered from many kinds of computer virus and hackers'attack. One of the effectual and important solutions for network security is to set firewall.On the market though most products' functions of firewall are quite strong at present, they are based on blow hypothese, which the inner network is safe and reliable, and all the threats are from the outer network. Then the firewall only needs to be cautious to the outer network, and not to the inner. Thus, it is difficult to realize the secure communication between the host computers in the LAN of enterprise, and also to settle host's security problem of every dialing Internet user. Most hosts have not placed themselves under the protection of inner security network during users in network. The personal Internet user mostly uses Windows OS, and its security is not very good. Various kinds of Windows loophole are being annouonced constantly, attack of the host computer is more and more, too. Then to protect the secure communication of the host computer, it is very necessary to develop effective personal firewall.This thesis focuses on the research of the personal firewall and its realization under Windows OS, because the Windows OS is applied in personal computers broadly. First, this paper introduces kinds of threats in network during the course of people use it, and then introduces the conception and theorem of firewall. The most important technology in personal firewall is packet filtering, the third part introduces kinds of packet filtering technology which are most popular nowadays, then discuesses their advantages and disadvantages, at last, I choose Winsock 2 SPI technology and heavy introduces it.This paper adopts the soft design idea of the structure and modularize, the fourth part designs the personal firewall's functions from the total top, then designs modules in light of the functions and explains the functions and achievements for every module in detail. The fifth part mainly designs the documents of this personal firewall, includes the structure of control canal rule documents and journal documents. The sixth part introduces the packet filtering module which is the most important module's achievements in detail.In the end, the functions of the personal firewall are tested, the result is analyzed and some proposals are put forward for further research.