Modeling and Global Conflict Analysis of Firewall Policy

The global view of firewall policy conflict is important for administrators to optimize the policy.It has been lack of appropriate firewall policy global conflict analysis,existing methods focus on local conflict detection.We research the global conflict detection algorithm in this paper.We presente...

Full description

Saved in:
Bibliographic Details
Published inChina communications Vol. 11; no. 5; pp. 124 - 135
Main Authors Liang, Xiaoyan, Xia, Chunhe, Jiao, Jian, Hu, Junshun, Li, Xiaojian
Format Journal Article
LanguageEnglish
Published China Institute of Communications 01.05.2014
Beijing Key Laboratory of Network Technology, Beihang University, Beijing 100191, P.R.China%Beijing Information Science & Technology University, Beijing 100192, P.R.China%Software Development Center of China Agricultural Bank, Beijing 100073, P.R.China%College of Computer Science and Information Technology, Guangxi Normal University, Guilin 541004, Guangxi Province, P.R.China
Subjects
Algorithm design and analysis
Analytical models
Classification algorithms
conflict analysis
conflict detection
Detection algorithms
firewall policy
Firewalls (computing)
semantic model
Semantics
冲突分析
冲突检测
建模
形式化模型
测算法
策略冲突
语义模型
防火墙
firewall policy
conflict analysis
conflict detection
semantic model
Online AccessGet full text

Cover

More Information
Summary:The global view of firewall policy conflict is important for administrators to optimize the policy.It has been lack of appropriate firewall policy global conflict analysis,existing methods focus on local conflict detection.We research the global conflict detection algorithm in this paper.We presented a semantic model that captures more complete classifications of the policy using knowledge concept in rough set.Based on this model,we presented the global conflict formal model,and represent it with OBDD（Ordered Binary Decision Diagram）.Then we developed GFPCDA（Global Firewall Policy Conflict Detection Algorithm） algorithm to detect global conflict.In experiment,we evaluated the usability of our semantic model by eliminating the false positives and false negatives caused by incomplete policy semantic model,of a classical algorithm.We compared this algorithm with GFPCDA algorithm.The results show that GFPCDA detects conflicts more precisely and independently,and has better performance.
Bibliography:The global view of firewall policy conflict is important for administrators to optimize the policy.It has been lack of appropriate firewall policy global conflict analysis,existing methods focus on local conflict detection.We research the global conflict detection algorithm in this paper.We presented a semantic model that captures more complete classifications of the policy using knowledge concept in rough set.Based on this model,we presented the global conflict formal model,and represent it with OBDD（Ordered Binary Decision Diagram）.Then we developed GFPCDA（Global Firewall Policy Conflict Detection Algorithm） algorithm to detect global conflict.In experiment,we evaluated the usability of our semantic model by eliminating the false positives and false negatives caused by incomplete policy semantic model,of a classical algorithm.We compared this algorithm with GFPCDA algorithm.The results show that GFPCDA detects conflicts more precisely and independently,and has better performance.
firewall policy semantic model conflict analysis conflict detection
11-5439/TN
ISSN:1673-5447
DOI:10.1109/CC.2014.6880468