A Firewall Rules Optimized Model Based On Service-Grouping

摘要：

　　Aiming at networks with a large number of firewall rules, in order to reduce the number of rules and rule filtering times while firewalls performance does not change, a firewall policy rules merging model based on rule-service is presented.The model detects the rules in a fast way using an algorithm based on rule service first, and then it resolves the conflicts segment by using action constraint strategy.And then it runs the rule merging algorithm in a set of rules with no anomalies based on service.Finally, the experimental results show that merging efficiency is outperformed compared with other similar rule merging models.Compared to the traditional firewall, the optimized firewall model made less filtering hits while processing the same packets.

关键词： network security firewall policy anomaly merging algorithm rule optimization

作者: Lin Zhang Mengxing Huang

作者单位: College of Information Science& Technology Hainan University Haikou ,China

会议类型: 国际会议

会议名称: The 12th Web Information System and Application Conference第十二届全国Web信息系统及其应用学术会议(WISA2015)、全国第十次语义Web 与本体论学术研讨会(SWON2015)、全国第九次电子政务技术及应用学术研讨会(EGTA2015)

会议地点: 济南

会议语种:英文

页码: 142-146

在线出版日期: 2015-09-11（万方平台首次上网日期，不代表论文的发表时间）