分布式防火墙策略异常检测与分析  

Detection and Analysis of Policy Anomalies in Distributed Firewalls

作　　者：李毕祥[1] 

机构地区：[1]武汉科技大学城市学院信息工程学部,武汉430083

出　　处：《计算机与数字工程》2011年第11期114-117,共4页Computer & Digital Engineering

摘　　要：为了克服传统防火墙的局限性,分布式防火墙的概念应运而生。在分布式防火墙中,安全策略统一制定,由各主机负责实施,很好地解决了边界防火墙安全策略越来越膨胀的弊端及内部网的安全性问题。论文对分布式防火墙的本质特征,体系结构和运做过程进行了详细的阐述。This paper analyses the inner network is reliable,is proved to be connectless in fact.Concept of distributed firewall is intrduced to eliminate these shortcoming.The distributed firewall takes on the architecture that the Control Center makes security policy and many node firewalls execute the policy,and effcetively solves the abuse raesed with the more and more policy and the inner network＇s security.Then the basic principle and related concept of DFW are described and a close study is made about the system models of DFW.

关 键 词：防火墙 安全策略 过滤规则 策略异常 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]