The Security Technology of E-commence - Intelligent Packet-filtering Firewalls

摘要

Research has revealed that, in the next ten to twenty years, the implementation of E-commence willrnbecome a new basis of economic increase of China and other countries in the world. And the essence ofrnimplementing E-commerce is the credit standing among the banks, the sellers and the customers. But the creditrnstanding in the net ultimately depends on the security of the network. Firewall is a useful network securityrntechnology to keep a network from being intruded. The rational use of firewalls can strengthen the security of thernE-commence system. Traditional package-filtering firewalls usually reject the illegal accesses and admit the legalrnaccesses according to filtering policy established by the administrator in advance. But the measures of attackingrnnetworks are increasing, so ACL (access control list) that is established in advance can hardly meet the needs ofrnthe rapid development of the network. And the real-time quality and sensitivity of traditional firewalls are notrnsatisfied. Now a new model of implementing the expert system to the management of network security is broughtrnforward. The focus of the intelligent packet-filtering firewall lies on the expert system. The tight combination ofrnexpert system and the filtering method can realize the efficient detection and control of the packages that flowrnthrough the firewall system. By using the intelligent firewall, the security of the E-commence can be strengthenedrnindeed.