| 一种分布式防火墙规则冲突的检测算法 |
| |
| 引用本文： | 徐刚强,胡伏湘.一种分布式防火墙规则冲突的检测算法[J].计算机测量与控制,2011,19(7). |
| |
| 作者姓名： | 徐刚强 胡伏湘 |
| |
| 作者单位： | 1. 湖南工程技术学院信息工程系,湖南长沙,410151
2. 中南林业科技大学计算机与信息工程学院,湖南长沙,410002 |
| |
| 基金项目： | 国家科技支撑计划项目(2006BAF01A13) |
| |
| 摘 要： | 为解决分布式防火墙中因规则冲突而导致策略异常问题,提出了一种基于XML的DFW策略异常的发现算法;该算法在分布式防火墙系统中,对于处在不同防火墙策略中的每条规则,设计一棵单根结点的树来表示分布式防火墙策略,即策略树(Policy Tree),然后通过集合全部的策略树,完成防火墙之间策略异常的发现过程;通过对算法的模拟运行,发现该算法在速度性能和可伸缩性方面较其他算法有很大的改进。
|
| 关 键 词： | 规则冲突 DFW 策略管理 XML 算法设计 |
Algorithm to Find Collisions Among Rules of Distribute Firewall |
| |
| Xu Gangqiang,Hu Fuxiang.Algorithm to Find Collisions Among Rules of Distribute Firewall[J].Computer Measurement & Control,2011,19(7). |
| |
| Authors: | Xu Gangqiang Hu Fuxiang |
| |
| Affiliation: | Xu Gangqiang1,Hu Fuxiang2(1.Information Engineering Department,Hunan Vocational College of Engineering,Changsha 410151,China,2.Central South University of Forestry and Technology,Changsha 410004,China) |
| |
| Abstract: | To solve the strategy abnormal problem,caused by conflict in distributed firewall rules,This paper puts forward a method based on XML DFW strategy abnormal found algorithm.This algorithm designs a Policy Tree,single node tree to express distributed firewall Policy at different firewall Policy for every rule,and then through set all the policy trees,complete the discovery process of strategy abnormal between the firewalls.Through the simulation of algorithm,it is found that the algorithm in speed performance... |
| |
| Keywords: | rule collision DFW policy management XML algorithm design |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
