自適應(yīng)智能防火墻的研究.pdf

1、天津大學(xué)碩士學(xué)位論文自適應(yīng)智能防火墻的研究姓名：鄒俊申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：通信與信息系統(tǒng)指導(dǎo)教師：鹿凱寧20020501ABSTRACTWitlthedevelopmentofInternetandcomputernetworkingtechnologynetworksecurityisincreasinglyimportanttotheapplicationofdatanetworkThedesignofanewadaptivein

2、telligentfirewallanditssireulationarefocusedinthedissertationFirstlythenewarchitectureoftheadaptiveintelligentfirewalliSpresentedwhichconsistsofsixelementarycomponents：intrusiondetectionmodulestaticpacketfilter，dynamicpa

3、cketmonitorapplicationproxycontrolmoduleandsecurityrulesTheintrusiondetectionmodulecanpreventDoS／DdoSattackThestaticpacketfilter，dynamicpacketmonitorandapplicationproxy0Eeadministeredbythecontrollertodealwiththeincomingc

4、onnectionsaccordingtotheirrespectivesecuritylevel，anewconceptdefinedinthesecurityrulesSecondlyfuzzylogiciSin訂oducedinthedesignoftIlecontrolmoduleThesourceanddestinationsecuritylevelsareencodedintofuzzysetsasinputsofthefu

5、zzycontrollerandtheoverallsecurityleveliSobtainedbasedonthefuzzyrulesForlowlytrustedpackets，bothapplication—levelmethodanddynamicpacketmonitorareused，whichprovideshighsecurityForhighlytrustedpackets，theyareonlyfilteredSo

6、thefirewallalleviatestheconflictbetweensecurityandspeedandremainsbothhighsecurityandhighperfoHnanceMoreovertheoverallsecuritylevelcanbeautomaticallyadjustedaccordingtothevaryingstatesofthepacketsandthesecuritypoliciesfor

7、thesepacketsarealsoadjustedThusthefirewallCanrespondtothesechangesandtakedifferentactionsrespectivelyThereforethefirewalliSbothadaptiveandintelligentFinally，thecontrolontheallocationofsystemresourceisusedtopreventDoS／DDo

8、SaaackWhenoverloaded，thefirewallCandenycertainkindsofconnectionsinordertoholdenoughresourcestoprovidenormalservicestousersFuzzyPIDcontrolleriSintroducedtocontrolresourceallocationKeywords：firewall，adaptive，intelligent，fu