流过滤技术是对包过滤、状态检测及应用代理的一种“融合”，实现了高性能、可扩展、透明的对应用层协议的保护。
Flow filtration technology is a kind of "integration" which compounds packet filtration, state detection and the agent of application.
针对状态检测技术中状态类型单一、包过滤逻辑不够灵活的缺点，提出一种改进的有状态模型，该模型对有状态技术中状态与状态更新逻辑两个概念进行了扩展与深化。
Based on that, we explore its defects and its possible development. After that, the concept 'State' and 'State Update Logics' are extended and a more general stateful firewall model is presented.
应用推荐