| With the internet rapid development, the unprecedented opportunities are brought into the industry of information security, as well as the challenges. The current major popular firewall is a kind of border firewall, which the firewall is normally deployed around the border of the network, to perform the prevention on the overall intranet hosts. This topology network can reduce the cost of the network prevention, but in the meantime, this architecture also brings the risks centralized. Furthermore, this kind of loosely coupled model can't defend the intrusion from intranet, and the host in the intranet can easily bypass the firewall to link with the internet. Thus the border firewall performs inability in the prevention of computer host system security.A tightly coupled firewall design proposal, which is based on embedded technology is discussed and analyzed in this paper, with a detailed introduction on tightly coupled firewall design idea and the related technique details for tightly coupled firewall realization. Firstly, a general design on the tightly coupled firewall is put forward. In order to implement tightly coupled architecture, a virtual network drive and a special path drive on both of the embedded system and host system are designed. Secondly, the security on the operation system kernel and security application program in the embedded system is rebuilt to guarantee the high security of the tightly coupled firewall. Thirdly, optimizing the function of embedded system network drive and security program, considering the limited resource features of the embedded system. The last one is, based upon the features of the tightly coupled firewall, proposing a feasible proposal--- tightly coupled firewall to achieve trustable computing, thus solve the host system security.The tightly coupled firewall is operated on the embedded devices with a PCI bus interface, no line connection between the firewall and the prevented computer host. |
PDF Full Text Request