為了更好地利用防火墻阻止拒絕服務(wù)攻擊和信息泄露，針對(duì)防火墻發(fā)展現(xiàn)狀和存在的問(wèn)題基礎(chǔ)上，提出了防火墻多級(jí)安全參考模型，設(shè)計(jì)了對(duì)防火墻的自主和強(qiáng)制訪(fǎng)問(wèn)控制模型；并對(duì)防火墻多級(jí)安全參考模型進(jìn)行了詳細(xì)分析；最后對(duì)基于多級(jí)安全參考模型的防火墻的實(shí)現(xiàn)作了進(jìn)一步改進(jìn)。
關(guān) 鍵 詞 防火墻; 自主訪(fǎng)問(wèn)控制; 強(qiáng)制訪(fǎng)問(wèn)控制; 參考模型; 多級(jí)安全; 拒絕服務(wù)

Abstract Based on the discussion of state-of-art of firewall and its problem, discretionary access control model and mandatory access control model are designed. In order to prevent information leakage and denial of service, a multi-level reference model for firewall is proposed. The firewall reference model are analysed. The Implementation of the firewall based on the reference model is promoted in the end.
Key words firewall; discretionary access control; mandatory access control; reference model; multi-level security; denial of service