基于改进决策树的有状态防火墙模型  

A Stateful Firewall Model Based on Modified Decision Trees

作　　者：张开宇[1] 陆松年[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《信息安全与通信保密》2010年第2期82-83,87,共3页Information Security and Communications Privacy

基　　金：国家自然科学基金资助项目(批准号:60903191)

摘　　要：适应复杂防御策略的有状态模型是研究有状态防火墙的核心内容。防火墙的运行不仅应当具有时间和空间上的效率,还应当允许管理员定义复杂的逻辑过程和状态信息。在一种经典的有状态防火墙模型的基础上,结合改进决策树,提出了一种新的允许用户自定义状态变量以及防御算法的模型。该模型能够更好地适应针对不同类型网络攻击,复杂多变的防御策略需求,在时间和空间上也具有较好的效率。A stateful model that adapts well to complex defense strategies is crucial to the study on stateful firewalls. A stateful firewall is required to have its space and time efficiency, and its capability to define complex defense algorithms and state information as well. Based on the study of a classic model and the concept of decision tree, the article presents a new model that allows users to define state variables and algorithms. The model adapts better to the need of defending different changing attacks, and realizes better efficiency in time and space.

关 键 词：有状态防火墙 包过滤 网络攻击 决策树 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]