Extendible intra network security device policy conflict detection algorithm
可扩展的网络安全设备内策略冲突检测算法*

This paper researched the intra network security device policy conflict detection method firstly. To aim at the lack of extendibility of most intra network security device policy conflict detection algorithms, used the standardization and discretization technologies, which mapped the attribute data of policy fields to the real number interval. Through defining the relation operation in real number interval, determined the relation between policy fields. Based on it, designed an extensible intra network security device policy conflict detection algorithm. Applying the rule filtering, improved the execute efficiency of the algorithm. The experimentation results show that the algorithm is correct, efficient and have practical value.