The Policy Mapping Algorithm for High-speed Firewall Policy Verifying

The Policy Mapping Algorithm for High-speed Firewall Policy Verifying
复制标题

高速防火墙策略验证的策略映射算法

DOI：
--
复制
发表时间：
2016
期刊：
International Journal of Network Security
影响因子：
--
通讯作者：
Kitt Tientanopajai
Kitt Tientanopajai
中科院分区：
--
文献类型：
--
作者：
Suchart Khummanee;Kitt Tientanopajai

文献摘要

被引文献

相似文献

在本文中，我们提出了一种新颖的算法和数据结构，以提高策略策略的速度。针对窗口策略的数据包，算法不限于将IP网络类作为IPSET，这是当今高速固定开源的顶部。通过使用Filewall决策状态图（FDSD）来澄清策略验证的订单。
In this paper, we have proposed a novel algorithm and data structures to improve the speed of firewall policy ver-ification. it is called the policy mapping (PMAP). Time complexity of the proposed technique is O(1) to verify incoming-outgoing packets against the firewall policy. Besides, the algorithm is not limited to handle IP network classes as IPSET which is the top of high-speed firewall open source today. PMAP can also optimize the firewall rule decision by employing the firewall decision state diagram (FDSD) to clarify ordering of policy verifying. The consumed memory of PMAP is reasonable. It consumes the memory usage around 3.27 GB for maintaining rule data structures processing the firewall rule at 5,000 rules.