| With the rapid growth of the network size and performance, network security is becoming increasingly important. As an important way of defense to protect the network inside, the traditional boundary network firewall has some obvious disadvantages, it can't defend the attack coming from inside, depend on the topology of network and be easily bypassed, be a network bottleneck and so on.Embedded Firewall(EFW), which extents safety strategy to the end of network, is a new type firewall based on embedded techniques. By implementing safety measure through hardware system, it effectively overcomes the limitation of traditional firewall and provides a more prefect network safety solution for enterprises. This technique, which combines the strength of hardware solution and the flexibility of software solution together, creates a better safety framework. Based on the ARM processor, we presents and designs the overall framework of EFW. Also the modular design and implementation of the hardware and software for EFW will be presented in the paper.First of all, the EFW hardware designing work selected S3C2410X chip with ARM920T core inside, this chip enjoys a high-performance, low power consumption and high flexibility characteristics; Secondly, in order to keep the flexibility, reliability and scalability, the layout of the hardware combined core boards and the expansion boards together; after that, finishing the adjustment and realization work according to the modular design. The design and realization of the software for EFW include coding the driver for the ethernet, customizing and transplanting the embedded linux operation system, establishing the file system, driving system of the network interface card and programming of the package filtering for the EFW, and so on.Test results show that the host computer can communicate with each other by EFW, transporting speed is about 22Mbps, and EFW can successfully filter the packet according to strategy configuration. |
PDF Full Text Request