基于哈夫曼树的防火墙规则动态优化的研究  

Research on Dynamically Optimizing Firewall Rules Based on Haffman Tree

作　　者：何祥滨[1] 周聪[1] 

机构地区：[1]南昌大学信息工程学院,江西南昌330031

出　　处：《计算机与现代化》2010年第8期207-210,215,共5页Computer and Modernization

摘　　要：随着网络功能的不断增加,防火墙过滤规则集合日益庞大,已严重影响了网络整体性能。本文基于网络流量的特征,提出一种根据网络流量变化动态调整防火墙规则的防火墙规则优化方法,使得匹配网络数据包越多的规则越先与数据包相匹配,从而尽量减少数据包过滤时间。With the increasing of the network function,the filtration ruleset in the firewall becomes more and more,which has affected the overall performance of network seriously.This paper proposes an optimization method that adjusts the rules in the firewall accord to the characteristics of network traffic dynamically.In this way,data packets matches the rules that have matched more data packets firstly,then reduces the time of filtering data packets.

关 键 词：防火墙 规则优化 数据包过滤 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]