基于DFSQL实现分布式防火墙策略异常检测与分析  

Detection and Analysis of Policy Anomaly in Distributed Firewall Based on DFSQL

作　　者：邓宝龙[1] 吴军[1] 

机构地区：[1]南京工业大学电子与信息工程学院,南京211816

出　　处：《计算机与数字工程》2012年第10期99-101,共3页Computer & Digital Engineering

摘　　要：分布式防火墙在保护网络安全方面发挥着重要作用,但是由于分布式防火墙规则之间的异常,给网络带来了安全隐患。理解并且分析分布式防火墙的功能及存在的异常是必要的但又困难的。因此,文章中引入DFSQL分布式防火墙策略异常查询结构性描述语言,并给出一种适用于分布式防火墙规则异常检测算法,通过仿真实验证明算法的正确性和执行效率。Firewalls are core elements in network security,however,due to distributed firewall polices anomaly creates security threat.Analyzing and understanding the firewall polices anomaly is necessary and difficult.In this paper,a simple and effective SQL-like query language is introduced,called the distributed firewall Structured query language,for decscribing the detection and analysis of policy anomaly in distributed firewall.A distributed firewall polices anomaly detection algorithm is presented for anomaly.Simulation results prove the correctness and the efficiency in the implementation of the algorithm.

关 键 词：DFSQL 分布式防火墙 安全策略 规则冲突 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]