Auxiliary Nuclear Safety Strategy And Fast Communication Mechanism Of The Heterogeneous System

The rapid development of the computer network technology is constantly changing humans' habits, and their ways of thinking. And the importance of the network security is attracting people's attention more and more deeply. Most of China's Internet users use Windows as their PC's OS. Because its source code is not open, we can't understand the deeper realization of its details, thus we can't build a fundamental network security protection system. The Linux OS is gradually becoming a hot topic in embedded security handling field because it's easy to be transplanted and its source code is open for all.This paper is based on the important result of the 863 item "A safe terminal technology of Windows based on Dual-Core and Dual-OS"——ENSS card and its driver, and this paper puts forward the salve-core security strategy based on the theory of hierarchical network. In data link layer, this paper first transfers the UTF-8 Chinese keywords into the same code form, then uses the improved KMP algorithm to do pattern matching, and gives the warning information, and then prevents these information flowing into Windows host. In network layer, this paper introduces the Netfilter tool to pull the data onto the network layer, then analyzes the reasons and the vulnerability of the commonly used protocols, and then makes some rules in detail, only allows the safe data to come across and finally flows into Windows protocol stack, and drops the unsafe packets. ENSS system uses the 10Mbps CS8900 Ethernet controller, to break its speed bottleneck, this paper puts forward a new fast communication mechanism based on the DM9000. This paper does some research on the interface between DM9000 and ARM processor, and draws the hardware base address, interrupt number, offset and so on, and amends the standard driver with these references, and uses the theory of driver's transplant, successes in transplanting the new DM9000 driver into the new card. The new card with DM9000 can provide a further fast speed than CS8900 according to tests.The experimental results show that the slave-core security strategy can meet the requirements of the keywords warning, and the access control of data packets, and the post-transplant DM9000 driver can provides a faster network services.