Based on the characteristics of collaborative design and RBAC(role-based access control) model,a new model named MDACM(message-driven access control model) is developed to solve security problem due to the distributivity and dynamic ability of collaboration through an authority that is expressed by a message entity or integrated message entity in combination with filter rule,then control by s.

Because every level firewall manager can add the filter rules.

The thesis mainly focus on configuration and control software, explores performances of large-scale filter rules, management and implements the function in the system to auto-manage rules from remote.

The bottleneck of the packet filter method is produced due to a large number of filter rules to be checked.

Methods Improve Naive Bayes arithmetic and rule-based filtering,and complete the software of this project under the Linux/Solaris system platform.

Methods Rule-based filtering and risk minimization Naive Bayes are combined in this project, and this project is improved in some necessary places.

How enhances the firewall system performance have the extremely vital significance,the filtration rule affects directly the firewall system performance,but how to inspects the filtration rule s order for firewall secure influence is successively very important,this article proposed the research of dynamic filtration rule based on statistical analysis with the secure inspection.