Design And Implement Of Personal Firewall

Along with the Internet technology has developed rapidly, a large number of personal computers connect to the Internet, to host attack showed a trend of exponential growth, the number of threats to computer security. And a personal firewall can protect the user host security, from malware attacks and Trojan virus, the personal firewall technology is of great significance to solve the problem of network security.This article mainly discusses the PSFW Windows operating system design and realization of the personal firewall. The system has the advantage of low cost, low CPU usage, simple operation.First of all, the article is to search current situation of the development of a personal firewall system both at home and abroad. Then, the description of network security, firewall definition, the firewall classification, personal firewall technology basic knowledge of firewall system is introduced in this paper.Secondly, the article analyzes the firewall technology, the Windows network component structure, to deal with the TCP/IP packet structure, research methods and the data filtering under Windows network. The working mode and working process of the firewall are analyzed.Finally, the design and implementation of a personal firewall are discussed in detail, this paper introduces the development environment, architectural design, then points module core module function design and implementation are discussed. Finally, the introduction is from the functional testing, performance testing inspection and test results analysis, and summarized and prospected.This system uses modular design system, improving the portability and flexibility. Winsock2 SPI and NDIS HOOK combine filtering technology, realizing packet interception. In general, the system is divided into five major functional modules: packet capturing module, a control rule setting module, log module, status indication and main interface, through personal firewall to prevent outside attacks, intrusion, completting to protect user information network security.