A Research on Secure Networking Platforms Based on Temporal and Spatial Analysis

在这项研究中，我们已经调查了防火墙和入侵检测系统的配置诊断系统。主要研究成果如下：1）基于过滤器间拓扑关系的防火墙策略分析方法; 2）带定时过滤器的防火墙策略分析方法; 3）安全策略与防火墙策略一致性验证方法; 4）入侵检测系统配置文件中规则间空间关系分析方法。

In this research, we have investigated configuration diagnosis systems for firewalls and intrusion detection systems. The followings are main research products: 1) An analysis method for firewall policies based on topological relations between the filters, 2) An analysis method for firewall policies with timed filters, 3) A verification method for consistency between a security policy and a firewall policy, 4) An analysis method for spatial relations between the rules in a configuration file of an intrusion detection system.