The Design And Research Of Windows Personal Firewall

With the rapid growth of computer network, the number of personal computers connected to the Internet is also increasing. How to avoid these computers being attacked by the hackers has been one pressing problem. The personal firewall (PFW) software is the best choice for personal users.PFW is guarding software for single operating system, which can run directly in the users' computers. It can protect a single system in the public networks without extra hardware resource. PFW can keep out not only the external attacks but also the internal attacks, which also takes on high economic value. It is very important to study the PFW.The thesis presents a novel PFW design scheme after deeply investigating the operational principle and core technologies of the PFW, which is based on Winsock2 SPI and NDIS HOOK.1. The working principle and core technologies are analyzed in detail. The research current situation of PFW is formulated and its developing trend is simply predicted.2. The networking protocols and their frameworks are discussed deeply, and the OSI and TCP/IP models are also researched.3. Based on the systemic analysis of several network data interception technologies, the thesis presents a novel high-security PFW design scheme. Winsock2 SPI technology is used to develop the DLL programs to intercept all the network communications based on socket in the application layer. While in the kernel layer, NDIS HOOK is applied to filter the data packets of the bottom layer.