分布式防火墙策略配置错误的分析与检测  

Analysis of distributed firewall policy configuration mistakes and their detection

作　　者：王卫平[1] 陈文惠[1] 朱卫未[1] 陈华平[1] 杨杰[2] 

机构地区：[1]中国科学技术大学信息管理与决策科学系,合肥230026 [2]江苏省公安厅信息中心,南京210024

出　　处：《中国科学院研究生院学报》2007年第2期257-265,共9页Journal of the Graduate School of the Chinese Academy of Sciences

基　　金：国家863计划项目(2003AA103710)资助

摘　　要：作为一种传统的信息安全技术,分布式防火墙发挥着非常重要的作用,同时,它也存在着一些问题.分布式防火墙策略经常会存在冲突,给企业带来了安全隐患.在讨论了防火墙规则的几种关系之后,给出了可能存在的策略配置错误,并给出了检测策略配置错误的算法,算法的仿真实验证明了算法的有效性和执行效率.最后,给出了需要进一步研究的方向.As a traditional information security technology （ IST）, distributed firewall is playing an important role but it has some problems. Conflicts always appear in distributed firewall policy, bringing the security menace. After discussions of some relations between the rules of firewall, this paper demonstrates the probable mistakes which might exist in policy configuration, and also introduces an algorithm of mistake-detecting about policy configuration. Finally, the direction of further research is also presented.

关 键 词：分布式防火墙 策略 规则冲突 算法 

分 类 号：TN915.08[电子电信—通信与信息系统]