Traffic-aware Access Control List Reconstruction
Traffic-aware Access Control List Reconstruction
复制标题
流量感知访问控制列表重建
DOI：
10.1109/icoin48656.2020.9016512
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Yasuo Okabe
中科院分区：
文献类型：
--
作者：
Kei Wakabayashi;Daisuke Kotani;Yasuo Okabe
访问控制列表（ACL）由网络管理员预先配置，并且基于规则列表来确定分组的允许/拒绝。规则列表通常由网络管理员手动创建，ACL的质量取决于网络管理员的技能。可能存在可以与其他规则集成的冗余规则。由于ACL处理的数据包数量巨大，使用这些无用的规则进行匹配可能会导致整个ACL的性能严重下降。在本文中，我们提出了一种方法来重建规则列表的流量数据标记的ACL。
Access Control Lists (ACL) are configured by a net-work administrator in advance and determination of permit/deny of a packet is made based on the rule lists. The rule list is often created manually by the network administrator and the quality of an ACL depends on the skill of the network administrator. There could be redundant rules that can be integrated with other rules. Since the number of packets handled by ACL is enormous, matching process with such useless rules might cause serious performance degradation of the entire ACL. In this paper, we propose a method to reconstruct rule lists from traffic data labeled by ACL.