Stateful Inspection Firewall, Protocol Analysis Based On Multi-core

Network influences the information society more and more, on which the society is much more depended. Network security is a critical problem with the boosting of diversified network application. Via analyzing the Internet security problem, the firewall, regarded as the Critical technique of network security, is proposed in this paper. As the basic of the network security, correlative knowledge of firewall is discussed in the paper, such as concept, function, security architecture and sort of firewall. Finally, a protocol analysis stateful inspection firewall is introduced.The software designed and implement of the protocol analysis Stateful inspection flrewall based on multi-core is present particularly with the test result analysis. The advantage of the multi-core architecture in network transmission business and the application of the network operating system software platform on network equipment are taken into account to design the system. Two function of the firewall present is completed:Firstly, the firewall is implemented to ensure the communication security by analyzing transport layer protocols and application layer protocols. The protocol analysis stateful inspection is realized by filtering packets during the transition of the protocol finite state machine, which is built up based on session.Secondly, the firewall is used to modify the address information of the application payload of the packet if its IP header was processed by network address translator and work as application gateway.The protocol analysis stateful inspection firewall based on multi-core is an open system, it raises the general framework of the protocol analysis, and realizes it in the protocol analysis of FTP, DNS, ICMP, QQ, MSN. The follow-up protocol analysis of other application protocol is easy to complete the expansion refer to the framework,...