(1. School of Information Science and Engineering, Hunan Univ, Changsha, Hunan410082，China;2. Dept of Computer Science and Engineering, Michigan State Univ, East Lansing, MI48824-1266, USA) 在知网中查找 在百度中查找 在本站中查找
Affiliation:
Fund Project:
摘要
|
图/表
|
访问统计
|
参考文献
|
相似文献
|
引证文献
|
资源附件
摘要:
状态防火墙是一种新型防火墙，而传统防火墙决策图(FDD)构造算法并不适用于状态防火墙的规则集比对.本文在FDD基础上，提出一种状态防火墙决策图(SFDD)构造算法，将规则集转化成图形化的等价的SFDD，用于状态防火墙规则集比对.理论分析和仿真实验结果表明，利用SFDD构造算法进行比对，能有效检测出规则集之间的全部不同点；当状态防火墙的状态部分规则和无状态部分规则条目数量均达到3 000时，比对过程所耗费的平均时间不超过2 s.
The stateful firewall is a new type of firewall, and the traditional firewall decision diagrams (FDD) construction algorithm does not apply to stateful firewall rule set. This paper presented a stateful firewall decision diagrams (SFDD) construction algorithm, which transforms the stateful firewall ACLs into equivalent stateful firewall decision diagrams, and is applied to the stateful firewall rule set comparison. Theoretical analysis and simulation results have shown that the method can effectively detect all the differences between the rule sets. And when the number of rules for both the stateful and stateless section is 3000, the time cost is less than 2 s.
