The Design And Implementation Of No.7 Signaling Firewall

Signaling network No.7,as the neural network of telecommunication network,is an important support for telecom network.Its security threat is increasingly concerned.The security protection of signaling network No.7 is an important part of the security protection system of telecommunication network.Because the signaling protocol No.7 is completely open,and the messages on all levels are completely transparent.Under the background of the gradual opening and integration of the current telecom network,the seven signalling network that is originally closed is facing huge security threats from inside and outside the network.In order to deal with the security threats faced by the No.7 signaling system in the telecommunication network,this thesis proposes a scheme to implement the SSN firewall device based on the serial non sense access mode combined with the basic principles and technology of network security protection.In this thesis,the background knowledge of signalling No.seven is briefly introduced,especially the content of the protocol actually applied to the equipment.Secondly,the requirement analysis of the whole project is carried out.In the system,function and performance,the specific requirements of the seven signaling firewall are summarized and combed with the actual application environment,the deployment mode and the specific demand for the network security.In the design and Realization of the system,the needs of the equipment in the system,function and performance are fully considered.The layout scheme and user experience design scheme are designed,and the functions of small volume,flexible configuration and serial non sense access are realized.In the design and realization of the hardware structure,this thesis mainly based on the two interface modes of E1 and IP,and uses the distributed processing mode,which is processed by the E1 interface card and the IP interface card respectively,and the master control card carries out the log statistics and the interface implementation.This improves the independence of software function,and provides the basic conditions for the division of software function modules.Ethernet communication between various cards.In the implementation of software design,this thesis divides the device software into the control system software and the multichannel network signal processing software based on two different access modes and two different load signaling of No.7 signaling,establishes the basic architecture and internal and external interfaces of the software system.Through the research on key technologies such as security policy,rule filtering,real-time monitoring,transparent transmission,attack defense and state machine filtering,the detailed functional modules of the main control system software and the multi channel network signal processing software are divided,and the work energy,control flow and data flow of each module are carried out.Detailed design.The device software uses the embedded Linux operating system,the C/C++ language,according to the module process design to carry out the code by one by one,this article lists the main implementation code of each module.In software testing,the corresponding test cases are compiled according to the functional performance requirements,and the testing environment and detailed testing methods are described.From the test results,it is fully proved that the No.seven signalling firewall device can effectively protect the No.seven signalling network.