Service Provider Interface技术研究及实现

防火墙作为一种网络安全工具已得到广泛的应用.结合当今的防火墙技术,给出了一个网络防火墙的设计方法.利用Winsock 2 SPI编程接口,编写自己的基础服务者,实现一种安全的防火墙结构.在Windows平台下,防火墙的基本原理都是对网络数据包的拦截过滤.包过滤防火墙采用了工作在应用层的Winsock 2 SPI作为其核心技术,编写动态链接库(DLL),用户通过调用DLL实现数据包的过滤.此方法具有编程、调试方便,容易实现内容过滤等优点,在防火墙方面得到广泛的应用.

Study and Implementation of Service Provider Interface Technology

Firewall as a kind of network security tools, has been widely used. This paper analyzes the problem of network and gives a design personal network firewall. It uses Winsock 2 SPI program interface to program base service provider, and builds a new architecture of firewall. Under the Windows platform, the fundamental rule of fire wall wholly is halting and filtering to the network data pack. Packet filtering firewall adapts to Winsock 2 SPI working in the application layer as its core technology to make its preparation for dynamic link library (DLL), and the users achieve packet filter by means of invoking DLL. This method has the merits of programming, debugging conveniently and realizing the content to filter easily and so on, thus it obtains the widespread application in the firewall aspect.