基于LE-Trie的防火墙策略检测算法  

Detection Algorithm for Firewall Policy Based on LE-Trie

作　　者：梁建武[1] 龙晓梅[1] 刘军军[1] 

机构地区：[1]中南大学信息科学与工程学院,长沙410075

出　　处：《计算机工程》2010年第22期134-136,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(60173041)

摘　　要：防火墙策略是一系列具体的规则集合,策略的制定对防火墙功能的发挥至关重要,不能存在异常情况。为此,研究基于惰性展开的Trie数据结构,利用LE-Trie结构存储规则表,提出一种防火墙策略的冲突检测与消除算法。仿真结果表明,与使用普通Trie结构的算法相比,该算法具有更高的执行效率。The firewall policy is a sequence of rules set, so it is very important to make the firewall work well and it must be without any conflicts. This paper introduces a description method based on LE-Trie data structure for firewall policy conflict detecting. Simulation result shows that using the LE-Trie storage rule table to describe the firewall policy can use less memory than the ordinary ones, and it can get a higher search speed as detecting conflicts.

关 键 词：网络安全 防火墙策略 LE—Trie结构 规则冲突 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]