Design And Implementation Of A Distributed Boundary Protection System

With the development and diffusion of the network, particularly with the rapid development of internet technology, the problem of network security has got more and more concern from users. Information technology provides a lot of enjoyments and benefits for people, and at the same time, we are also facing an increasingly prominent issue of information security. Then how to build up an effective security protection system for the network using the advanced network techniques is an important project that we must pay great concern.This thesis studied the commonly-used network security techniques, with the special concernon the definition of the network security borders. Based on the understanding for the current situation of network information system development and security, a comprehensive analysis for different forms of firewall-based security protection architectures is presented, and a distributed border protection system which is based on the reality of the organization and can protect single computer and the whole network is developed using the NetFilter design framework in Linux and loading core modules to the NetFilter. The new system which extends the functions of the traditional firewall system, can filter the business programs designed by users, then the purposes of protecting interior network against outside attacks and ensuring that only the legal application programs of a specified computer are allowed to access the outside network are achieved. The newly developed system has been put into practical use and it operates firmly, and functions the good border protection.