Content filtering gateway realizing method based on network filter

Abstract

A method for realizing content filtering gateway based on network filter includes realizing network content analysis and real time monitor as well as realizing purpose of filtering application layer information at network layer based on Linux system platform, utilizing network filter Net-filter frame to carry out collection and filtering on data packet under kernel state for optimizing network path of data packet and for raising collection efficiency of data, furthermore using shared internal memory technique of user space and kernel space to submit session content from kernel state to content filtering module of user state.

Description

technical field [0001] The invention belongs to the technical field of communication, and specifically designs collection and filtering of data packets in a kernel state, session restoration, communication between a user state and a kernel state, realization of a transparent mode, and the like. Filtering can be performed based on the complete content of the session to prevent illegal data packets from passing. Background technique [0002] The Internet satisfies the supreme realm of "fast" and "unrestricted" that people have been pursuing for thousands of years, breaks through time and space, and realizes people's dream of freedom. It fits the original nature of people, and the degree of "freedom" achieved exceeds people's imagination. The openness of the Internet has allowed people to enjoy the freedom of unfettered access to various information, release of speech, but at the same time, it has also brought many information security problems. [0003] Statistics show that ...

AI Technical Summary

Problems solved by technology

There are various kinds of information on the Internet, most of which have not been strictly checked and screened. Although they can meet the needs of some education, information and leisure, there are also a large number of obscene, pornographic, Violent terror, anti-government and racial discrimination websites

[0004] The second category of security concerns is the threat of virus infection and spam

The application layer agent can understand various application protocols and can conveniently filter content, but it is opaque to users, and different agent programs must be written for each application

And slower speed, greater impact on network performance

Images