【作者】 刘姿欢； 徐国胜；

【Author】 Liu Zihuan;Xu Guosheng;Beijing University of Post and Telecommunications Information Security Center;Beijing University of Post and Telecommunications;

【机构】 北京邮电大学信息安全中心； 北京邮电大学；

【摘要】 在网络安全管理系统事件处理模块,针对大量相同过滤规则存在二次匹配现象,本文采用了Rete算法。然而在Rete网络构造时,需要多次查找Type结点及其对应的值,故而进一步采用HashMap对Type结点和结点的值进行排序处理,从而提高查找的效率。实验结果表明,算法改进后规则网络的构造时间减少了,系统的运行效率有所提高。更多还原

【Abstract】 In the network security management system event processing module,there are secondary matches for a lot of the same filtering rules,this article uses the Rete algorithm to solve this problem.However,when the rule network is constructed,it requires multiple lookups about Type nodes and its corresponding values,therefore this article uses HashMap to sort Type nodes and its values.After sorting,the efficiency of lookup is improved.Experimental results show that the improved of the algorithm reduces the time of the construct of the rule network,and improves operational efficiency of the system.更多还原