`

---

専門英語B 要旨 第一稿（186 words）
Application firewalls can monitor traffic on users' PCs and block unwanted communications by looking at the content, while providing features for interactively editing rules. Because conventional application firewalls does not handle encrypted packets, it is not feasible for encrypted communications.
This paper describes an implementation method of an application firewall which can decrypt payloads using virtualization technologies. The proposed method creates a virtual environment for each application and monitors network traffic with an packet filter attached to a bridge interface. The virtual environment is provided by a virtual machine monitor (VMM). The program which runs in userspace interacts with a user and allows the user to edit firewall rules through a terminal user interface (TUI). The program in userspace obtains cleartexts from encrypted traffic with shared keys acquired from the virtual environment, and also coordinates the packet filter by maintaining 5tuple rule table entries on demand.
Based on the proposed method, an application firewall has been implemented using Docker as the VMM and eBPF program as the packet filter. Experimental results show that the proposed method is feasible in a current PC and Internet access environment.