- 學位論文
建構結合IP路由器及代理伺服器之多層防火牆
Proxy Router - Combine IP Router and Proxies to Construct Multilevel Firewall
若您是本文的作者，可授權文章由華藝線上圖書館中協助推廣。
並列摘要
Connectivity to public networks such as the Internet has long been considered a valuable, yet risky proposition to many privateinstitutions. Due to the wealth of resources available on the Internet,it has become an important application platform. Additionally, connectivity to business partners is becoming a very importantcompetitive advantage in reducing cycle time and increasing theefficiency of an organization. However, the ability to connect securely and seamlessly to untrusted networks has been a difficult task for most organizations to realize. This paper studies the solutions for site to connect to Internetwith security control. The "Proxy Router" will be developed not only for Firewall setups but also for transparent access to Internet. It will support all kinds of Proxies, moreover, with security control of multilevel firewall. No extra setups or configuration on client machines will be required. Besides, this paper also put together some possible add-ons such as SKIP to strengthen the security of firewalls. It is to be discussed that how secure the solution is. After all, security should be put into consideration before practical connectivityfor site.長久以來連結到網際網路一直被許多機構認為是 一個有價值但危險的主張。由於網際網路上的資源豐富，使得網際網路已 經成為一個重要的應用平台。此外，在降低組織周期時間並且增進效率方 面來說，與事業上的夥伴透過網路連接也形成很重要的競爭優勢。然而， 對大多數的組織而言，要能安全無慮的連接到網際網路卻是一項艱鉅的工 作。本篇論文研討如何有安全管制的連結到網際網路。"Proxy Router"的 開發不僅只為防火牆的設定，並使得與網際網路的連結全面透通。它將支 援各種的Proxy，更進一步的用來設定多層的防火牆。在使用者的工作站 上將不需要額外的設定。此外，本篇論文並將提出一些可與防火牆搭配以 強化安全的技術，以供參考。並將討論這些技術的安全性，畢竟，在實際 連結到網際網路前，安全是優先考慮的重點。