基于DFSQL实现分布式防火墙策略异常检测与分析

分布式防火墙在保护网络安全方面发挥着重要作用,但是由于分布式防火墙规则之间的异常,给网络带来了安全隐患.理解并且分析分布式防火墙的功能及存在的异常是必要的但又困难的.因此,文章中引入DFSQL分布式防火墙策略异常查询结构性描述语言,并给出一种适用于分布式防火墙规则异常检测算法,通过仿真实验证明算法的正确性和执行效率.

Detection and Analysis of Policy Anomaly in Distributed Firewall Based on DFSQL

Firewalls are core elements in network security,however,due to distributed firewall polices anomaly creates security threat.Analyzing and understanding the firewall polices anomaly is necessary and difficult.In this paper,a simple and effective SQL-like query language is introduced,called the distributed firewall Structured query language,for decscribing the detection and analysis of policy anomaly in distributed firewall.A distributed firewall polices anomaly detection algorithm is presented for anomaly.Simulation results prove the correctness and the efficiency in the implementation of the algorithm.