摘要 |
A device for providing a blended protection scheme for a high assurance communication device includes a reconfigurable firewall and packet inspection device for enforcing isolation and separation between a communication device's CPUs, memory, and the communication device, where the reconfigurable firewall is implemented on an integrated chip or motherboard chipset. The device further includes a protected CPU that is adapted to manage security functions and to reconfigure the reconfigurable firewall. In embodiments, the device is a firewall and virus infection inspection system. In other embodiments the device is a virtual private network for network based communications.
|