防火墙在网络边界中的安全性评估

防火墙是在内部网与外部网之间实施安全防范的系统 ,负责对资源的访问控制。笔者深入分析了防火墙的过滤技术、状态检测技术及代理技术在Internet应用中的安全弱点 ,阐述了网络的拓扑结构、防火墙配置、网络边界环境对防火墙安全的影响 ,提出了构建防火墙时 ,可以采用从外部和内部两个方向对防火墙进行安全性评估原则 ,以及一些可行的探测防火墙弱点、网络流量、防火墙规则是否实现的方法 ,从而在网络边界中构建更加安全的防火墙。

Security Evaluation of Firewall at the Network Border

The firewall is the security system in-between the inside and outside network,responsible for controlling the visit to resources. The filtration technology of the firewall, the detection technique of the state, and the security weakness i n Internet of agent's technology are analyzed in detail. The topologi cal structure of the network, the disposition of firewall, and the influence of the borderline environment of the network security to the firewall are described . Authors suggest that when building firewall, the principle of security assessm ent from both outside and inside the firewall, some feasible survey for firewall weakness, network flow, and the realization of firewall rules may be adopted. I n this way more secure firewall at the network border could be installed.