%0 Journal Article
%T Test packet-choosing algorithm for rules updating<br>针对规则更新操作的测试数据包选取算法*
%A LI Lin
%A LU Xian-liang
%A NIE Xiao-wen
%A XU Hai-mei
%A PU Xun
%A PENG Yong-xiang
%A <br>李林
%A 卢显良
%A 聂晓文
%A 徐海湄
%A 蒲汛
%A 彭永祥
%J 计算机应用研究
%D 2009
%I 
%X The deployment errors in firewall rule sets mainly come from rules updating. And hence test algorithms should be employed to verify the correctness of updating when rules are added or deleted. Current test algorithms only choose test packets from apexes of added or deleted rules, which cannot detect deployment errors caused by rule conflicts. This paper proposed a test packet-choosing algorithm for rules updating, which was named packet choosing rule updating (PCRU).PCRU chose test packets from the apexes of rules and from conflicting areas. The results of simulations show that PCRU can detect the deployment errors caused by rule conflicts when rule updating at the cost of a small number of test packets.
%K rule conflicts
%K rule updating
%K test packets
%K firewall
%K correctness<br>规则冲突
%K 规则更新操作
%K 测试数据包
%K 防火墙
%K 正确性
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=A9D9BE08CDC44144BE8B5685705D3AED&aid=9843E249B42AA885D1EBE3334B7E6FE5&yid=DE12191FBD62783C&vid=96C778EE049EE47D&iid=94C357A881DFC066&sid=E883F6786C89427F&eid=8827E7669C34610F&journal_id=1001-3695&journal_name=计算机应用研究&referenced_num=0&reference_num=8