一种防火墙安全策略冲突检测方法  

A Method of Conflict Detection on Firewall Security Policies

作　　者：李镭[1] 余兴华[1] 罗淑丹 LI Lei;YU Xing-hua;LUO Shu-dan(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2018年第6期1425-1429,共5页Communications Technology

摘　　要：随着网络技术和社会的发展,网络攻击越来越多,信息安全成为全球普遍关注的焦点。为应对不同方式的网络攻击,出现了不同的网络安全设备和技术方法,而防火墙是其中重要的网络安全设备之一。在防火墙上执行多条不同的安全策略时,策略冲突不仅会影响网络正常运行,而且会威胁网络安全。因此,对两个防火墙策略之间的关系进行定义,提出了安全管理域内和域间的两种防火墙策略的冲突检测方法,并给出了相应的算法。Due to the development of network technology and society, there are more and more cyber attacks, thus information security has become the focus of global attention. In order to deal with different types of cyber attacks, there are different network security devices and technical methods. Firewall is one of the important network security devices. Firewall is a commonly used security device in distributed networks.When different security policies are executed on the firewall, the conflicts will interferer the normal operation even threaten the security of the networks. This paper defines the relationship between two firewall security policies, and proposes two conflict detection methods of inter-domain and intra-domain firewall security policies.

关 键 词：防火墙 安全策略 策略冲突 冲突检测 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]