Internet Firewall and its Linux Implementation

Huafeng Lü,Qiufeng Wu

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.08.015

2001-01-01

Abstract:This paper explains the basic theory of the Interbet firewall technology,introduces the architectures of several kinds of firewall,and gives out some firewall softwares under Linux operating system and their applications.

What problem does this paper attempt to address?

The Fire Wall Based on Linux

Xiaorong Gao

2003-01-01

Abstract:With the constant development of the application of computer network, the network security is more and more important. This paper discusses the key techniques of network security and shows how to build a firewall based on Linux. Besides, it gives prospects for the development of future firewall.
On the Implementation of a Firewall Based on Linux Platform

范训礼,景广军

DOI: https://doi.org/10.3969/j.issn.1000-2758.2002.03.011

2002-01-01

Xibei Gongye Daxue Xuebao/Journal of Northwestern Polytechnical University

Abstract:This paper presents a firewall system based on Linux - L-Firewall, which combines packet filter and proxy technology. Proxy and authentication are implemented on B1 level operating system. The paper emphasizes on the L-Firewall frame, especially on the implementation of packet filter module. L-Firewall provides not only HTTP, FTP proxy and packet filter, but also content filter, network address translation to protect network from IP spoofing and IP source route spoofing. L-Firewall tallies with GB/T17900-1999 and GB/T18020-1999.
A Reference Model And System Architecture For Database Firewall

L Cai,Xh Yang

DOI: https://doi.org/10.1109/ICSMC.2005.1571196

2005-01-01

Abstract:More and more network attacks are focusing on application level vulnerabilities. Recently, several examples of this trend have been highly publicized such as the SQL Slammer and SQL Snake attacks. Traditional firewalls, used for protecting the database, only prevent attacks searching for vulnerabilities. Database firewalls take defense deep into the organization by providing full syntax control and audit of the SQL AN stream before it reaches the database, and enforcing content-driven access to database. This paper proposes a layered reference model for database firewalls by enhancing the capability of COAST Laboratory's model. It separates a database firewall into three layers (network layer, schematic layer and semantic layer) according to the knowledge, computation target, and the control granularity of each layer. Based on this model, a database firewall product had been prototyped It can greatly improve the database security by introducing self-controlled authentication principal mapping, object mapping, and mandatory access control modules.
Design and Implementation of Enterprise Network Security System Based on Firewall

Hui Yuan,Lei Zheng,Shuang Qiu,Xiangli Peng,Yuan Liang,Yaodong Hu,Guoru Deng

DOI: https://doi.org/10.1007/978-3-030-15235-2_142

2019-04-25

Abstract:With the rapid development of the network, in recent years, the Internet has greatly improved people’s lives, and the real-time, sharing and distance-removing characteristics of network information transmission have made the operation and management of enterprises more efficient and coordinated. The basis of refinement. At the same time, various network security incidents have followed, such as hacker attacks on computer network systems, and various types of viruses, Trojans and other active attacks emerge one after another. In this regard, this paper analyzes the enterprise network security system of firewall from the perspective of enterprise network security, briefly summarizes the background, advantages and disadvantages of firewall technology, and designs and implements a client software according to the actual needs of users. The network performs real-time intelligent security monitoring. After the system design is completed, the security is tested by building a simulation platform, including qualitative testing and quantitative testing, which are divided into security and performance to verify whether the system can achieve and guarantee performance.
Port Scanning Techniques and Analysis of Attack and Defense

Zhaohui Hu,Qi Chen,Ruizhao Yu

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.10.020

2001-01-01

Abstract:This article introduces the implementation of TCP Protocol and the technique of Port Scanning based on the characteristic of TCP Protocol,at the same time,the several implementations of Port Scanning are also described. We also analyze the potential external attacks that can be made because of the weakness of operation system and the ways to avoid suck kinds of attack are also put up.
PRINCIPLE AND IMPLEMENTATION OF FIREWALL MECHANISM IN LINUX KERNEL

徐辉,潘爱民,阳振坤

2002-01-01

Abstract:This paper elaborates on the firewall mechanism in Linux 2.2 kernel, named IPchains, and gives the analysis of its scheme and implementation. The concept of dynamic Network Address Translating and IP masquerade in Linux are also discussed. A brief introduction is given to the firewall in the new 2.4 Linux kernel at the end of this paper.
Methods for Running Windows Applications under Linux

胡玉杰,李善平

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.11.066

2003-01-01

Abstract:This paper introduces some methods of running Windows applications u nder Linux. Descriptions, analyses and comparisons of three of them are mostly d etailed.
Design for Firewall Integrating with Intrusion Detection

Jian Xie

2004-01-01

Abstract:It is hard for single- functioned secure products to meet the current demand,and the trend begin to change towards Integration.A frame of firewall based on Linux is discussed as to improve the ability of security control.
The research of firewall technology in computer network security

Wei Chen,Yantao Wang,Xin Yue

DOI: https://doi.org/10.1109/PACIIA.2009.5406566

2009-11-01

Abstract:This paper analyzes the computer network security features and the main threat, synthesis the firewall technology of current domestic and international, on the basis of various firewalls' principles, advantages and shortcomings. Through the synthesis and compare of various techniques, in-depth study of the main factors affection firewall performance, combined with the network status quo of Heilongjiang Provincial Center, this paper researches the firewall technology of the actual application in the computer network security, then refers the new technique called tight coupling firewall, finally the article leads to a lack of firewall technology and the direction of its development.

Computer Science
Design and Implementation of Network Worm Detection System for Internal Network

WANG Wei,LU Dongming,DONG Yabo,CHEN Yufeng

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.17.072

2006-01-01

Abstract:With the rapid development of computer technology,Internet applications are used more and more widely,computer networks are exposed to various threats,especially network worms.This paper introduces the definition and principle of network worms,and based on the mechanism of network worms,it proposes and implements a network worm detection system for Internal network,which is proved to be able to detect the network worm accurately.
Design and Implementation of Distributed VoIP Architecture Based on SIP Protocol

张旭光,平玲娣,潘雪增

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.14.037

2004-01-01

Abstract:With the development of the Internet technologies and computer communication technologies, the traditionary circuit-switch based network must evolves to the new generation network which is based on the packet-switch technology. Facing the progress and status of the convergence of the three-networks, This document presents a distributed and SIP protocal based VoIP system prototype. Due to combinating of merits of SIP and IP, this model not only provides the interoperation with the existed network, but also provides an extendable plat for the NGN. This model uses private VoIP network to achieve the QoS.
On the Relationship between Computer Firewall Technology and Network Security

Lan Jiang

DOI: https://doi.org/10.1088/1742-6596/1744/3/032137

2021-02-01

Journal of Physics: Conference Series

Abstract:Abstract The rapid development of The Internet brings convenience to people, but also brings some problems to people. The danger of information pollution and destruction is becoming more and more serious, in order to reduce the loss of confidence and security to people. People have studied firewall technology. The use of firewall technology provides a reliable guarantee for protecting the security of data and resources. This paper mainly discusses the application of firewall technology in computer network security from the aspects of network security, the general situation and types of firewall [1] .
IPSec-based Distributed Firewall Security Architecture

崔伟,齐竞艳,蔡圣闻,黄皓

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.16.051

2004-01-01

Abstract:The paper introduces the basic notion of distributed firewall, analyses the security threatens. Then it introduces IPSec protocols,and presents an IPSec-based distributed firewall security architecture including the internal design and external design.This architecture combines IPSec and some other secure measures with distribtued firewall so as to give distributed firewall stronger security.
Firewall Network Security Research

Chen Liang

Abstract:Text information on the content of network security and the fundamental changes, expounding China's development of national information security system and the importance of the establishment of China's network security system with the need. On the network firewall security technology and the classification of the main technical characteristi.

Engineering,Computer Science
Research And Design Of Nids Based On Linux Firewall

Jia Zongpu,Liu Shufen,Wang Guowei

DOI: https://doi.org/10.1109/SPCA.2006.297482

2006-01-01

Abstract:Firewall has many shortages, such as it cannot keep away interior attacks, it cannot provide a consistent security strategy, and it has a single bottleneck spot and invalid spot, etc. Intrusion Detection System (IDS) also has many defects, such as low detection ability, lack of effective response mechanism, poor manageability, etc. If firewall and IDS are integrated, the cooperation of them can implement the network security to a great extent: on the one hand, IDS monitors the network, provides a real-time detection of attacks from the interior and exterior, and automatically informs firewall and dynamically alters the rules of firewall once an attack is found; on the other hand, firewall loads dynamic rules to hold up the intrusion, controls the data traffic of IDS and provides the security protection of IDS. Based on constructing firewall with Iptables in the environment of Linux OS, the respective characters of firewall and IDS are analyzed. Then, the viewpoint of integrating firewall and IDS to realize the network security is proposed, and the application and algorithm of intrusion detection are systemically analyzed and designed.
Analysis and Exploration of Related Issues on the Computer Network Security Based on Firewall and Anti-Virus Software

Wu Peng

DOI: https://doi.org/10.1007/978-3-642-25437-6_7

2012-01-01

Abstract:In the computer network security protection, we often use the anti-virus software and firewalls, but both of the computer network security features and functions are different, and each of them has its own characteristics and expertise. This paper makes some research and analysis of a number of issues about network security based on anti-virus software and firewall technology.
IPSec:Fundamental of Network Security and VPN

Huafeng Lu,Qiufeng Wu

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.02.013

2001-01-01

Abstract:This paper introduces basic concepts and major components of IPSec protocol suite,the security extensions to the existing TCP/IP protocol suite,discusses the method of constructing VPN by using IPSec,and shows FreeS/WAN,an IPSec-based VPN implementation,as an example.
Design and Implementation of IPv6 Transparent Firewall with Virus Filtering

张玉芳,熊忠阳,赖苏,张科,刘君,王银辉

DOI: https://doi.org/10.3969/j.issn.1002-137x.2009.04.028

2009-01-01

Computer Science

Abstract:The existing packet filtering firewall is helpless for the spread of network virus,making a study on the designed of anti-virus firewall is very necessary.This paper designed and realized an experimental anti-virus firewall in IPv6.The firewall was realized in the form of kernel loadable module,and can be used to filter virus above link layer.The special TCP/IP used for firewall is rebuilt because transparent mode firewall cannot be run in the original TCP/IP of Linux.The firewall can get and resolve IPv6 packets and the IPv6 in IPv4 tunnel packet.It can also traverse every extension header until higher protocol layers.The firewall uses open source software to filter the virus in the network and ensures network security.For working in the kernel mode,the detecting speed was improved.The experimental results show that the performance and function of the firewall achieve the desired objectives.
Research on Computer Network Security Based on Firewall Technology

Xinzhou He

DOI: https://doi.org/10.1088/1742-6596/1744/4/042037

2021-02-01

Journal of Physics: Conference Series

Abstract:Abstract In the era of rapid network development. Its security has attracted much attention. In order to improve the security of computer network. Firewall as one of the most effective technologies. His development has also attracted people’s attention. This article will further analyse firewall technology. I hope you can get some inspiration from it.
Firewall Fingerprinting and Denial of Firewalling Attacks.

Alex X. Liu,Amir R. Khakpour,Joshua W. Hulst,Zihui Ge,Dan Pei,Jia Wang

DOI: https://doi.org/10.1109/TIFS.2017.2668602

2017-01-01

Abstract:Firewalls are critical security devices handling all traffic in and out of a network. Firewalls, like other software and hardware network devices, have vulnerabilities, which can be exploited by motivated attackers. However, just like any other networking and computing devices, firewalls often have vulnerabilities that can be exploited by attackers. In this paper, first, we investigate some possible firewall fingerprinting methods and surprisingly found that these methods can achieve quite high accuracy. Second, we study what we call denial of firewalling (DoF) attacks, where attackers use carefully crafted traffic to effectively overload a firewall. To the best of our knowledge, this paper represents the first study of firewall fingerprinting and DoF attacks.

Internet Firewall and its Linux Implementation

The Fire Wall Based on Linux

On the Implementation of a Firewall Based on Linux Platform

A Reference Model And System Architecture For Database Firewall

Design and Implementation of Enterprise Network Security System Based on Firewall

Port Scanning Techniques and Analysis of Attack and Defense

PRINCIPLE AND IMPLEMENTATION OF FIREWALL MECHANISM IN LINUX KERNEL

Methods for Running Windows Applications under Linux

Design for Firewall Integrating with Intrusion Detection

The research of firewall technology in computer network security

Design and Implementation of Network Worm Detection System for Internal Network

Design and Implementation of Distributed VoIP Architecture Based on SIP Protocol

On the Relationship between Computer Firewall Technology and Network Security

IPSec-based Distributed Firewall Security Architecture

Firewall Network Security Research

Research And Design Of Nids Based On Linux Firewall

Analysis and Exploration of Related Issues on the Computer Network Security Based on Firewall and Anti-Virus Software

IPSec:Fundamental of Network Security and VPN

Design and Implementation of IPv6 Transparent Firewall with Virus Filtering

Research on Computer Network Security Based on Firewall Technology

Firewall Fingerprinting and Denial of Firewalling Attacks.