【作者】 杨旭；

【导师】 皮德富； 黄夫祥；

【作者基本信息】 南京理工大学 ， 电子与通信工程， 2008， 硕士

【摘要】 随着计算机技术和通信技术的发展,计算机网络将日益成为重要信息交换手段,渗透到社会生活的各个领域。因此,认清网络的脆弱性和潜在威胁以及现实客观存在的各种安全问题,采取强有力的安全策略,保障网络信息的安全,是每一个国家和社会以及每一个团体和个人必须正视的事情。本文针对计算机网络应用相关的基本信息安全问题和解决方案进行了研究。本文从网络信息安全的基本概念和存在的安全问题入手,简单分析了信息加密技术、数字摘要、数字签名、数字信封、数字证书等数字安全技术,着重论述了防火墙技术在网络信息安全中的应用,分析了防火墙技术的功能、类型、体系结构以及发展历程,探讨了新一代防火墙技术的发展和应用,并结合本人参加单位信息化改造的工作实际设计了一种混合型的防火墙系统。本文较为详细地论述了设计该型防火墙的目的和希望解决的问题,给出了该型防火墙的结构组成,阐述了其功能原理,并为实现了相关功能编制了该型防火墙的配制文件。该型防火墙在内部网和外部网之间形成一个屏蔽子网,可以较好地抵御来自内外部的威胁,可自动根据具体情况完成内外主机的通信,可智能更新信息的过滤规则、自动配置过滤策略,具有防病毒功能,能自动生成事件日记,同时还提供了Web、Mail等服务。更多还原

【Abstract】 With the development of computer and communication technology, the computer net will penetrate every field of our social life as an important method of exchanging information. So, recognizing the frangibility and potential threatens of the net and some existent security problems objectively, taking effectively security strategy and ensuring the security of the net information are the things that every country, and group and every person must envisage. The basic information security problems and the solutions relating to the application of the computer net have been worked in the paper.From the basic concept and existent problem of the net information security, some digital security technologies, such as information cryptography technology, digital abstract, digital signature, digital envelope and digital credentials have been analyzed in the paper. And the application of the firewall technology in the net information security, the functions, types and system structure of the firewall technology, and the development and application of the new generation of the firewall technology have been discussed. Finally, unified the work actually, a kind of mixed firewall system has been designed.In this paper, the purposes of designing the firewall and the questions that expecting to resolve are expounded in detail, the structure of the firewall is given, its functions and principle are stated and its formulating files are drawn up in order to achieve the related functions. There is a shielding subnet between internal net and external net. The shielding subnet can protect your network from internal and external threats, automatically bring about communication between internal and external net according to the concrete conditions, intelligently renew the filtering rules of information, automatically dispose the filtering policies, it can anti-viruses and then generate event files automatically, simultaneously, it also offers services such as Web and Mail.更多还原