| Windows平台个人防火墙技术的研究 |
| |
| 引用本文： | 孙卫,荆霞,王诚,庄卫华. Windows平台个人防火墙技术的研究[J]. 南京审计学院学报, 2010, 7(2): 84-92 |
| |
| 作者姓名： | 孙卫 荆霞 王诚 庄卫华 |
| |
| 作者单位： | 1. 南京审计学院,信息科学学院,江苏,南京,210029
2. 河海大学,计算机及信息工程学院,江苏,南京,210098 |
| |
| 摘 要： | 针对目前Windows下个人防火墙软件在拦截网络数据封包上所存在的不足,提出了一种新的用户态和内核态混合的网络数据封包拦截方案。该方案基于Winsock2服务提供者SPI和NDISHOOK,能克服单一的网络数据包拦截方案的缺点,在理论上可以截获所有通过Windows的网络封包,同时接口简单、思路明确并且容易实现软件的自动安装。根据实验系统的测试表明,新的网络数据包拦截方案有很好的稳定性,系统具有良好的使用价值。
|
| 关 键 词： | Windows平台 防火墙 包拦截 NDIS HOOK SPI |
Research on the Personal Firewall Based on Windows |
| |
| SUN Wei,JIN Xia,WANG Cheng,ZHUANG Wei-hua. Research on the Personal Firewall Based on Windows[J]. journal of nanjing audit university, 2010, 7(2): 84-92 |
| |
| Authors: | SUN Wei JIN Xia WANG Cheng ZHUANG Wei-hua |
| |
| Affiliation: | 1.School of Information/a>;Nanjing Audit University/a>;Nanjing 210029/a>;China/a>;2.School of Computer and Information Engineering/a>;Hohai University/a>;Nanjing 210098/a>;China |
| |
| Abstract: | A new method based on Windows kernel mode and user mode is proposed so as to solve the problems of packet capture in personal firewall products.The method is based on Windows Socket 2 SPI and NDIS HOOK.It avoids the defect of single way to capture packet.And theoretically,it can capture all the packets.Experimental results show that experimental system based on the new method of packet capture is effective and stable. |
| |
| Keywords: | Windows platform firewall packet capture NDIS HOOK SPI |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
