| 用于控制器保护的防火墙规则的三叉树算法 |
| |
| 引用本文： | 傅一帆,刘小树,刘跃,黄玲. 用于控制器保护的防火墙规则的三叉树算法[J]. 电子技术应用, 2012, 38(10) |
| |
| 作者姓名： | 傅一帆 刘小树 刘跃 黄玲 |
| |
| 作者单位： | 杭州和利时自动化有限公司,浙江杭州,310018 |
| |
| 摘 要： | 为提高防火墙安全规则的查找速度,提出了一种面向IP地址集合处理的时间复杂度为O([log32N])的三叉树查找算法,N为安全规则数。用空间分析法解决规则冲突,并给出规则树的生成算法,该方法适用于控制应用的可靠性分析和安全完整性等级验证的要求。
|
| 关 键 词： | 防火墙规则集 规则匹配 规则冲突检测 三叉树 |
Ternary search tree algorithm of firewall rules for controller protection |
| |
| Fu Yifan , Liu Xiaoshu , Liu Yue , Huang Ling. Ternary search tree algorithm of firewall rules for controller protection[J]. Application of Electronic Technique, 2012, 38(10) |
| |
| Authors: | Fu Yifan Liu Xiaoshu Liu Yue Huang Ling |
| |
| Abstract: | A ternary search tree algorithm in time O([log32N]),which is IP address range set oriented,is presented for speedups of searching firewall rules,where N is the number of rules.This paper also proposes the analysis of a multi-dimensional Euclidean space model on which rules are specified to solve the problem of rule conflict.The generating algorithm of firewall rule tree is described in details.The ternary search tree algorithm facilitates system reliability analysis and verification of safety integrity level,and is particularly applicable to control applications. |
| |
| Keywords: | firewall rule set packet classification rule conflicts detection ternary search tree |
| 本文献已被 万方数据 等数据库收录！ |
|
