【作者】 徐超；

【导师】 刘泉；

【作者基本信息】 武汉理工大学 ， 通信与信息系统， 2003， 硕士

【摘要】 随着Internet的发展，Internet已经成为人们获取信息的重要手段之一。Internet正不断增强着人类社会的生产力，改变着人类社会的生产方式，也因此Internet成为上个世纪最伟大的人类发明之一。 然而，由于Internet最初的设计初衷并未全面考虑到今天Internet发展的现状，因此在最初设计时，设计人员并没有清楚地意识到网络安全对于今天人们进行网络通信的重要性。目前，随着电子商务和电子政务的提出，网络安全问题已经成为Internet发展的巨大障碍，各国政府、公司和科研机构都加大了对网络安全技术的研究和对网络安全产品的开发。与安全网关相关的技术研究成为各公司和科研单位所热衷的课题之一。国外安全网关的相关技术和产品市场已经相当成熟，而国内在这方面还处在起步阶段，虽然有一些公司提出了一些解决方案，但总体上还处在技术探索阶段，没有成熟的产品。自从国家颁布了一系列有关安全的法律法规以来，网络安全逐渐受到人们的重视，其相关市场也逐渐发展起来。 本文在研究嵌入式系统及安全网关理论与技术的基础上，结合多种网络安全技术，提出了一种嵌入式安全网关的解决方案。该方案不仅具备通常安全网关所使用的防火墙技术、虚拟专用网技术等技术的特点外，还突出体现了结构紧凑、性能稳定、配置方便等嵌入式体系结构的特点。硬件上，本文充分考虑了嵌入式安全网关的应用特点，采用POWERPC同DSP协同工作的双CPU的结构，形成了安全网关的一个特色。我们提出的这种双CPU的结构，很好地解决了网络交换和加解密运算的矛盾，从而大大提高了网关性能。更多还原

【Abstract】 It’s well known that with the rapid development of Internet, internet is turning to be one of the most important instruments of getting information. More and more official network, personal computer and portable equipment have become the knots of the network; therefore it has turned into one of the greatest inventions in the last century.However, the original design of Internet hasn’t considered the importance of the net security. At present with the appearance of the E-commerce and E-government, the security of Internet has become a great barrier in the development of Internet. Governments, companies and research institutions in various countries have strengthened the research and the development of the Internet security products. The research connected with gateway technology is popular nowadays. The correlative technology of security and product market overseas is mature, but in domestic market, we are just in the fundamental phase. Most companies have not developed mature products. Since the legislature has been enacted, the circumstance changed. People pay much more attention to the net security and the home security market gradually developed.This paper successfully presents a design plan of the embedded security gateway based on the research of the embedded system, concerning the theory and the technology, which not only entails the firewall, the technology of VPN, but also manifests the structure specialties, including the compacted-structure, stable-capability and convenient-configuring. To the hardware, the paper adopts the co-work structure of POWERPC and DSP, forming a conspicuous trait of this security gateway, which has considered the application characteristic of the embedded security gateway.更多还原