Distributed network firewall system of Linux based on defense strategy

Abstract

The invention discloses a distributed network firewall system of Linux based on a defense strategy, which provides network security protection for a computer with a Linux operating system in a local area network. The system has a distributed structure which consists of a server terminal subsystem and a client subsystem. In the network firewall system, a network topologic structure for the local area network is firstly constructed in the server terminal for the local area network to be protected and then services to be protected and possibly attacked manners are selected and a defense rule document is generated. The defense rule document is timely updated in the client system and deployed to achieve the purpose of protection. A plurality of defense rules aiming at different computers and services in the network are generated by means of strategy reasoning and explanation of the client system to protect all computers with the client subsystem and firewall correspondingly. One defense strategy is set for a single network node to safely protect the plurality of network nodes simultaneously.

Description

technical field [0001] The invention relates to a computer firewall system, more particularly, refers to a distributed firewall system based on defense strategies for protecting computers installed with Linux operating systems in local area networks. Background technique [0002] Local Area Network (Local Area Network) is a computer communication network that connects various computers, external devices, and databases within a local geographical area (such as a school, factory, and institution). It can be connected with a remote local area network, database or processing center through a data communication network or a dedicated data circuit to form a large-scale information processing system. LAN for short refers to a computer group formed by interconnecting multiple computers in a certain area. "A certain area" refers to the same office, the same building, the same company and the same school, etc., generally within a few kilometers. Local area network can realize functi...

AI Technical Summary

Problems solved by technology

However, in view of the current domestic and foreign status quo, most of the research on distributed firewalls stays at the model establishment and design stage, and a few distributed firewall products that have been implemented are all based on the underlying configuration language in terms of firewall policy formulation, which is different from configuring each firewall individually. The practice of computer firewall defense rules is basically the same, and the core feature of distributed firewall "policy centralized customization" is not fully realized, thus lacking due uniformity and efficiency

Images