分布式防火墙策略配置错误的分析与检测

Analysis of distributed firewall policy configuration mistakes and their detection

作为一种传统的信息安全技术,分布式防火墙发挥着非常重要的作用,同时,它也存在着一些问题.分布式防火墙策略经常会存在冲突,给企业带来了安全隐患.在讨论了防火墙规则的几种关系之后,给出了可能存在的策略配置错误,并给出了检测策略配置错误的算法,算法的仿真实验证明了算法的有效性和执行效率.最后,给出了需要进一步研究的方向.

As a traditional information security technology （ IST）, distributed firewall is playing an important role but it has some problems. Conflicts always appear in distributed firewall policy, bringing the security menace. After discussions of some relations between the rules of firewall, this paper demonstrates the probable mistakes which might exist in policy configuration, and also introduces an algorithm of mistake-detecting about policy configuration. Finally, the direction of further research is also presented.