Windows簡(jiǎn)單防火墻的設(shè)計(jì)與實(shí)現(xiàn)

論文字?jǐn)?shù):10976,頁(yè)數(shù):25

  摘  要
隨著互連網(wǎng)的高速發(fā)展，網(wǎng)絡(luò)給我們帶來(lái)了極大的方便。人們的學(xué)習(xí)、工作以及生活越來(lái)越依賴于計(jì)算機(jī)網(wǎng)絡(luò)，隨之也出現(xiàn)了許多網(wǎng)絡(luò)安全問(wèn)題，因此當(dāng)前網(wǎng)絡(luò)安全產(chǎn)品備受人們的重視。防火墻是保障系統(tǒng)安全的一種有效手段，它可以將個(gè)人電腦與不完全的網(wǎng)絡(luò)隔離開，按照預(yù)先設(shè)定的規(guī)則決定是否允許數(shù)據(jù)包通過(guò)，以此保障了個(gè)人電腦的安全。
本畢業(yè)設(shè)計(jì)是基于Windows 2000操作系統(tǒng)、DDK for Windows2000工具開發(fā)包及Visual C++6.0平臺(tái)開發(fā)的簡(jiǎn)單防火墻系統(tǒng)。系統(tǒng)主要分為兩個(gè)模塊：過(guò)濾鉤子驅(qū)動(dòng)模塊和用戶操作界面模塊。過(guò)濾鉤子驅(qū)動(dòng)模塊主要功能是注冊(cè)過(guò)濾鉤子回調(diào)函數(shù)，并按照用戶提供的過(guò)濾規(guī)則進(jìn)行數(shù)據(jù)包的過(guò)濾；用戶操作界面模塊的主要功能是實(shí)現(xiàn)用戶添加、刪除過(guò)濾規(guī)則，同時(shí)允許用戶以文件的形式保存所添加的過(guò)濾規(guī)則。

關(guān)鍵詞：防火墻；包過(guò)濾；鉤子；回調(diào)函數(shù)

The Design and Realization of Simple Firewall for Windows
Abstract
With the rapid development of Internet, it brings us great convenience. We become more and more dependent on the Internet, but it brought a lot of questions of network security, thereby the products of network security attract much attention. Firewall is an effective means to secure the system. It can separate personal computer from unsafe network, according to the preset rules to decide whether to let the packet through. It guarantees the safety of personal computer.
This paper is based on Windows 2000, DDK for Windows 2000 and Visual C++6.0 platform to develop simple firewall system. There are two parts in the system, which are hook filter driver module and the module of user interface. The main function of hook filter driver module is to register hook callback function and filter packet according to rules. The main function of user interface module is to add or delete filter rules, and save filter rules as file.

Key words: firewall; packet-filtering; hook; callback function

目  錄

1 引言 1
1.1 課題背景 1
1.2 國(guó)內(nèi)外研究現(xiàn)狀 1
1.3 本課題研究的意義 1
1.4 本課題的研究方法 2
2 相關(guān)理論技術(shù)基礎(chǔ) 2
2.1 防火墻技術(shù)簡(jiǎn)介 2
2.1.1 防火墻簡(jiǎn)介 2
2.1.2防火墻分類 2
2.1.3 防火墻的局限性 3
2.2 Visual C++6.0相關(guān)技術(shù)簡(jiǎn)介 3
3 總體設(shè)計(jì)方案 4
3.1 設(shè)計(jì)過(guò)程 4
3.2 設(shè)計(jì)方案 4
4 過(guò)濾鉤子驅(qū)動(dòng)的實(shí)現(xiàn) 5
4.1 Filter_Hook Driver概述 5
4.2 過(guò)濾鉤子驅(qū)動(dòng)的實(shí)現(xiàn) 6
4.2.1 創(chuàng)建內(nèi)核模式驅(qū)動(dòng) 6
4.2.2 設(shè)置和清除過(guò)濾鉤子 8
4.2.3 過(guò)濾器鉤子的I/O控制 10
4.2.4過(guò)濾函數(shù)實(shí)現(xiàn) 11
5 客戶端應(yīng)用程序 12
5.1 界面設(shè)計(jì) 12
5.2 編碼規(guī)則 14
5.3 主要的類 14
5.4 核心代碼 14
5.4.1開始過(guò)濾和停止過(guò)濾 15
5.4.2安裝和卸載過(guò)濾條件 16
5.4.3文件存儲(chǔ) 17
結(jié)    論 18
參考文獻(xiàn) 18
致    謝 19
聲    明 20