%0 Journal Article
%T Algorithm for Detecting Firewall Policy Inconsistency<br>防火墙策略不一致性检测算法
%A WANG Wei-Ping
%A CHEN Wen-Hui
%A LI Zhe-Peng
%A CHEN Hua-Ping
%A <br>王卫平
%A 陈文惠
%A 李哲鹏
%A 陈华平
%J 中国科学院研究生院学报
%D 2007
%I 
%X As a traditional technique of information security,firewall has played a very important role.Security administrators frequently have to compare firewall policies looking for inconsistence,while it is not a smooth process to choose a platform for the comparison.To realize the comparison between firewalls' policies,this paper provides FPT(firewall policy tree) model,and the construction algorithm which can turn a firewall policy into a policy tree,as well as the comparison algorithm,and finally presents the procedures of comparing firewalls' policies.Combination of the two algorithms can be used to perform a comparison between firewalls' policies.By doing this,the paper can obtain the set of data packages on which different firewalls have made inconsistent filter decisions,so as to find out the inconsistency in firewalls' policies.
%K firewall
%K policy
%K comparison
%K algorithm<br>防火墙
%K 策略
%K 比较
%K 算法
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=B5EDD921F3D863E289B22F36E70174A7007B5F5E43D63598017D41BB67247657&cid=B47B31F6349F979B&jid=67CDFDECD959936E166E0F72DE972847&aid=687FBF65F9E3A23E&yid=A732AF04DDA03BB3&vid=B91E8C6D6FE990DB&iid=38B194292C032A66&sid=965F4E89CD0AFC30&eid=9EF602EA28138BEA&journal_id=1002-1175&journal_name=中国科学院研究生院学报&referenced_num=0&reference_num=14