一种基于决策树的防火墙策略描述方法  

A description method for firewall policy based on decision tree

作　　者：刘军军[1] 梁建武[1] 

机构地区：[1]中南大学信息科学与工程学院,湖南省长沙市410075

出　　处：《微计算机信息》2008年第33期223-224,217,共3页Control & Automation

基　　金：国家自然科学基金资助项目"计算机网络分布资源认证;存取控制问题的研究"(No.60173041)

摘　　要：防火墙策略是一系列具体的规则,所以策略的制定对防火墙功能的发挥至关重要。本文主要介绍一种基于决策树的图的方式来描述防火墙策略,利用图论的方法,将抽象的策略描述成图就可以利用图的方式来设计和规划防火墙策略,这样可以有效防止策略之间的冲突,在保证防火墙策略正确有效的同时还可以去掉那些冗余的策略条款,使防火墙的工作高效快捷。The firewall policy is a sequence of rules, so it is very important of making it to let the firewall work well. This paper is mainly an introduction on a description method based on decision tree for firewall policy. Using the theoretical manner of graph theory to describe the abstract firewall policy into concrete ones, we could design and scheme it. In this way, the conflicts of firewall policy are avoidable, and the firewall can work efficiently without so many abundant rules.

关 键 词：网络安全 防火墙 防火墙策略 决策树 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]