湖南大学学报（自然科学版）Issue(10)：103-107,5.
一种基于SFDD 的状态防火墙规则集比对方法
A New Approach to Compare Stateful Firewall Rule Set Based on SFDD
摘要
Abstract
The stateful firewall is a new type of firewall,and the traditional firewall decision diagrams (FDD)construction algorithm does not apply to stateful firewall rule set.This paper presented a stateful firewall decision diagrams (SFDD)construction algorithm,which transforms the stateful firewall ACLs in-to equivalent stateful firewall decision diagrams,and is applied to the stateful firewall rule set comparison. Theoretical analysis and simulation results have shown that the method can effectively detect all the differ-ences between the rule sets.And when the number of rules for both the stateful and stateless section is 3000,the time cost is less than 2 s.关键词
网络安全/防火墙规则/访问控制Key words
network security/firewall rules/access control分类
信息技术与安全科学引用本文复制引用
秦拯,厉怡君,欧露,Alex X.Liu..一种基于SFDD 的状态防火墙规则集比对方法[J].湖南大学学报（自然科学版）,2014,(10):103-107,5.基金项目
国家自然科学基金资助项目(61272546,61472131,61070194) （61272546,61472131,61070194）
