防火墙规则间包含关系的解析方法

发布时间：2018-04-21 12:35

本文选题：网络安全 + 防火墙　；参考：《计算机应用》2015年11期

【摘要】：针对防火墙规则集中规则间的相互关系难以把握,从而导致防火墙无法正确地过滤数据包的问题,提出了一种基于集合理论的规则间包含关系的解析方法。该方法在不考虑规则动作的情况下,基于集合理论的包含关系来解析和分类规则之间的关系,简化了分析规则间相互关系的过程。并且使用高效的函数式编程语言Haskell实现了所提出的方法,整体代码简洁、易于维护和扩展。实验结果表明,对于中小规模的防火墙规则集,能够快速而有效地解析规则间的包含关系,并且能够为后续的规则间的异常检测提供重要的依据。
[Abstract]:Aiming at the problem that the relationship between rules in firewall rule set is difficult to grasp and the firewall can not filter packets correctly, this paper presents a method of parsing the relationship between rules based on set theory. This method analyzes and classifies the relationship between rules based on the inclusion relation of set theory without considering the action of rules, and simplifies the process of analyzing the relationship between rules. The proposed method is realized by using the efficient functional programming language Haskell. The whole code is simple and easy to maintain and extend. Experimental results show that for small and medium-sized firewall rule sets, the inclusion relationship between rules can be resolved quickly and effectively, and can provide an important basis for the subsequent exception detection between rules.
【作者单位】：东南大学计算机科学与工程学院;南京师范大学计算机科学与技术学院;
【基金】：国家自然科学基金资助项目(60973122) 国家973计划项目
【分类号】：TP393.08

【相似文献】