北京邮电大学学报

  • EI核心期刊

北京邮电大学学报 ›› 2006, Vol. 29 ›› Issue (4): 90-93.doi: 10.13190/jbupt.200604.90.lix

• 研究报告 • 上一篇    下一篇

防火墙过滤规则集冲突检测算法

李鑫,季振洲,刘韦辰,胡铭曾   

  1. 哈尔滨工业大学 计算机科学与技术学院,哈尔滨 150001
  • 收稿日期:2005-03-08 修回日期:1900-01-01 出版日期:2006-08-30 发布日期:2006-08-30
  • 通讯作者: 李 鑫

An Algorithm for Detecting Firewall Filters Conflicts

LI Xin, JI Zhen-zhou, LIU Wei-chen, HU Ming-zeng   

  1. School of Computer Science and Technology, Harbin Institute of Technology, Harbin 150001, China
  • Received:2005-03-08 Revised:1900-01-01 Online:2006-08-30 Published:2006-08-30
  • Contact: LI Xin

摘要:

为了提高多维规则集冲突检测算法在速度性能和可伸缩性,在GoT (grid of trie)算法的基础上提出了一种新算法。该算法采用Patricia trie压缩搜索路径,通过限制因特网协议(IP)前缀长度引入哈希技术,通过在五维规则的基础上引入防火墙的入口和出口信息使得哈希技术能够显著提高算法性能。

关键词: 报文分类, 规则冲突, 冲突检测

Abstract:

To improve the efficiency and scalability of conflict detection for multi-dimensional classifiers, a new algorithm, based on grid of trie (GoT) algorithm, was proposed. The new algorithm uses Patricia trie, constricts the length of Internet protocol (IP) prefix in order to use Hashing technology, and improves the performance of the algorithm by adding ingress and egress of firewall for each filter.

Key words: packet classification, filter conflict, conflict detect

中图分类号: