ABSTRACT

Traditional host-based firewall role in network layer, only in accordance with pre-configured filter rules to monitor and analyze datagram, and can only provide a single-level, static network security, which was set by network security experts based on experience and existing knowledge, it is difficult to adapt to ever-changing network (Qiu 2006, Hao 2010).