摘要
防火墙是一种重要的网络安全技术,但随着网络规模的发展,遇到了许多急需解决的问题,其中就有防火墙网络瓶颈的问题。提出一种新的规则匹配算法来解决这个问题,把多维的问题进行降维处理,根据规则之间有无关联性把规则进行分类处理,另外把新添加的规则运用散列表进行组织,从而做到在增加扩展性的同时,使时间效率不受大的影响。
Firewall is an important network security technology. However, with its development, many problems occur, especially the speed of firewall . Some people suggest solving the problem by using loading balance or distributing ideas. This essay brings a new arithmetic of matching firewall rule to solve the problem by reducing the dimension of multidimensional problem. This arithmetic classifies the rules according to their relationship and organizes the added rules with hash table with the result that its time
efficiency is not influenced much with its extension increased.
出处
《计算机安全》
2009年第7期11-13,共3页
Network & Computer Security
基金
江苏省高校自然科学基金项目(06KLB520090
03KJB50103)
南通市科研计划项目(K2006008
AL2007033)
南通大学自然科学基金项目(07Z059)
