基于Linux下Netfilter框架的智能防火墙的研究

发布时间：2018-09-03 10:36

【摘要】：近几年来,移动通信技术有了快速的发展,而移动网路偶入侵检测也伴随而生,也不断的成文当前通信技术的重要趋势。很多学者认为,到2015年,移动3S终端上会标配由大量的嵌入式视频、音频程序与硬件设备,这对移动互联网与入侵检测芯片与市场而言意味着巨大的商机与前景,必将带来不菲的经济效益。除此之外,以个人媒体播放器为代表的各种产品将成为个人网络入侵检测数码消费品的快速发展方向。Linux是一种可以用来处理复杂任务的操作系统,并且是一种开源的嵌入式操作系统。同时对它的研究和应用可以增加自主核心研发能力,减少对国外相关软件的依赖。通常有嵌入式Linux内核、根文件系统、Bootloader、开发工具链、主要的系统应用程序以及nfs和tftp服务的设置等组成Linux软件开发环境。在这几个组成部分当中如何构建适合DM320平台的Bootloader和嵌入式Linux内核在智能防火墙设计中得到实现。利用NETFILTER这个工具在Linux服务器上实现安全稳定、功能强大的防火墙。目前这也是被企业和高校广泛采用的一种比较先进的技术。本文提出了一种在NETFILTER(,智能防火墙)系统上应用嵌入式Linux的方法;重新研究以及定制了嵌入式Linux操作系统,并在次基础上把Linux操作系统成功移植到NETFILTER设备上,除此之外,这种方法也可以逐步推广其它消费类电子产品的结构设计上。本文的重点工作是把开源社区的Linux源代码成功它移植到NETFILTER系统中,同时运行稳定。基于TI DM320的NETFILTER解决方案,仔细的探讨了该方案的软、硬件体系底层架构;研究了嵌入式系统和嵌入式Linux,详细的分析了基于TI DM320平台的Bootloader和嵌入式Linux内核的移植过程。完成几了个常见的NETFILTER网络入侵检测程序的设计,并实现了Linux操作系统下的NETFILTER防火墙。最后,搭建了测试环境,对所实现的防火墙性能进行了测试,给出了测试结果。
[Abstract]:In recent years, mobile communication technology has developed rapidly, and mobile network even intrusion detection has been accompanied by, and has been an important trend of the current communication technology. Many scholars believe that by 2015, mobile 3s terminals will be standardized by a large number of embedded video, audio programs and hardware devices, which means huge business opportunities and prospects for mobile Internet, intrusion detection chips and the market. It will bring great economic benefits. In addition, various products, represented by personal media players, will become the fast developing direction of personal network intrusion detection digital consumer goods. Linux is an operating system that can handle complex tasks. And is an open-source embedded operating system. At the same time, its research and application can increase the independent core R & D ability and reduce the dependence on foreign related software. Usually, there are embedded Linux kernel, root file system Boot loader, development tool chain, main system application program and the setup of nfs and tftp service to make up the Linux software development environment. Among these components, how to construct Bootloader and embedded Linux kernel suitable for DM320 platform is realized in the design of intelligent firewall. Use NETFILTER this tool in Linux server to achieve security and stability, powerful firewall. At present, this is also widely used by enterprises and colleges and universities a more advanced technology. This paper presents a method of applying embedded Linux to NETFILTER (, (Intelligent Firewall) system, restudies and customizes the embedded Linux operating system, and successfully transplant the Linux operating system to NETFILTER device. This method can also gradually promote the structural design of other consumer electronic products. The focus of this paper is to successfully transplant the Linux source code of the open source community to NETFILTER system and run stably at the same time. Based on the NETFILTER solution of TI DM320, the software and hardware architecture of this scheme is discussed in detail, and the transplanting process of Bootloader and embedded Linux kernel based on TI DM320 platform is analyzed in detail by embedded system and embedded Linux,. Completed several common NETFILTER network intrusion detection program design, and implemented the NETFILTER firewall under the Linux operating system. Finally, the test environment is built, the performance of the firewall is tested, and the test results are given.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【共引文献】