关键词: 防火墙, 规则集, 冲突检测, 无关联

Abstract:

The fire wall has already become a key role in the network security architecture,and more and more attention has been paid to the management of firewalls. This paper aims at the problems of rule collision and rule match efficiency in the management of firewalls,and submits an irrelevant rule set match algorithm based on  collision detection. By analyzing  the filtering rules,the paper confirms 5 relations that the rules should be matched;by categorizing  the collision rules,the paper concludes the collision detection state diagram according to the collision's characteristics,which helps to optimize the firewall rule set. Based on the analysis of the traditional liner match algorithm and the tree match algorithm,the paper submits an irrelative rule set match algorithm based on collision detection.The efficiency of the algorithm is O(log(n)) on the average and the performance of the algorithm is better than the traditional ones.

Key words: firewall, rule set, collision detection, irrelative