【摘要】 为了适应复杂的网络环境,防火墙的规则集往往非常庞大,因此人工的方法很难保证防火墙安全策略的正确配置。文中对防火墙中异常策略的检测方法进行了深入的研究,并在此基础上给出了NP防火墙中异常策略检测模块的设计与实现。测试结果表明,该模块可以有效地检测出防火墙规则集中的各种异常,避免安全隐患的产生。更多还原

【Abstract】 According to the complex network environment,the rule set of firewall is usually very large,so it is very difficult to make sure manually whether the security policy in firewall is configurated correctly or not.In this paper,we make a thorough researche on the detection of the anomaly policy in firewall.Then based on it,the design and implement of anomaly policy detection module in NP firewall is proposed.The result of the experiment shows that this module can efficiently detect the anomaly in firewall rule set and avoid the security hidden trouble.更多还原