| 包过滤防火墙相关规则的排序及向无关规则的转化 |
| |
| 引用本文： | 蒋宁,廉东本.包过滤防火墙相关规则的排序及向无关规则的转化[J].小型微型计算机系统,2004,25(8):1550-1553. |
| |
| 作者姓名： | 蒋宁 廉东本 |
| |
| 作者单位： | 1. 中国科学院研究生院,北京,100039;中国科学院,沈阳计算技术研究所,辽宁,沈阳,110004
2. 中国科学院,沈阳计算技术研究所,辽宁,沈阳,110004 |
| |
| 摘 要： | 提出了防火墙规则排序的算法 .防火墙进行包过滤时 ,规则集中的规则是顺序匹配的 ,这样防火墙过滤效率不高 .为了应用快速的非顺序的规则匹配算法 ,则必须将相关的防火墙规则转化为无关的规则 ,本文为此提出了防火墙相关规则向无关规则的转化算法 .两个算法实现之后的应用效果明显
|
| 关 键 词： | 网络安全 防火墙 包过滤 规则 |
| 文章编号： | 1000-1220(2004)08-1550-04 |
Sort for Relative Rules and Translation to Inrelative Rules for Packet-Filtering Firewall Rules |
| |
| JIANG Ning ,LIAN Dong ben.Sort for Relative Rules and Translation to Inrelative Rules for Packet-Filtering Firewall Rules[J].Mini-micro Systems,2004,25(8):1550-1553. |
| |
| Authors: | JIANG Ning LIAN Dong ben |
| |
| Affiliation: | JIANG Ning 1,2,LIAN Dong ben 2 1 |
| |
| Abstract: | In this paper, an algorithm is proposed to sort firewall rules exactly. Firewall is inefficient because rules is matched orderly. To apply effectively out of order matching algorithms, it is necessary to translate relative rules to irrelative rules. Another translation algorithm is proposed for this purpose .The application effect after implementing two algorithms is effectual. |
| |
| Keywords: | network security firewall packet filtering rule |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
