Abstract: SWIM is the information sharing infrastructure network implemented by ICAO for the next generation of air traffic management. SOA is employed in SWIM to realize the sharing of air traffic resource service. Firstly, the application scenario, SWIM service management center, is designed in order to study the security strategy of Web service. In response to the high concurrency feature of SWIM Web subscription/publish service requests, a SWIM Web firewall is designed to ensure secure communication among clients. The distributed implementation of SWIM Web firewall is conducted basing on the architecture of SWIM service management node, achieving filtering and reasonable distribution of service through flow control, load balancing and content filtering. The current firewall is then embedded in LNMP platform to conduct test and verification. Experimental results prove that this firewall can reasonably allocate and effectively filter data packets.

Key words: SWIM, web firewall, flow control, load balancing, content filtering