A Firewall Based Scheme for Computer Networks Security

Abstract

Many organizations are in the process of connecting to the Internet to take the advantage of Internet services and resources. While Internet connectivity offers enormous benefits in terms of increased access to information, Internet connectivity is not necessary a good thing for sites with low levels of security. Firewalls are effective type of network security. Most of the firewalls protect the private network by controlling the traffic between the Internet and the private network based on the header information in the packets or the commands in the payload part of the packets. In this thesis we propose a module, which can be added to the firewall to extend the firewall functionality, by controlling the communications based on the actual contents of messages that is to more secure the critical information of certain organization from being sent through the Internet. The module depends on filtering the messages sent through the Internet according to some keywords predetermined to be a clue for the critical information of the organization. Besides, we propose an artificial intelligence based intrusion detection module to be used in detecting and preventing the misuse intrusions. This module is added to the firewall to strengthen the firewall that is by detecting the malicious behavior of the new attackers using a new methodology of attacking the networks.