一种基于决策树的防火墙策略描述方法

A description method for firewall policy based on decision tree

防火墙策略是一系列具体的规则,所以策略的制定对防火墙功能的发挥至关重要。本文主要介绍一种基于决策树的图的方式来描述防火墙策略,利用图论的方法,将抽象的策略描述成图就可以利用图的方式来设计和规划防火墙策略,这样可以有效防止策略之间的冲突,在保证防火墙策略正确有效的同时还可以去掉那些冗余的策略条款,使防火墙的工作高效快捷。

The firewall policy is a sequence of rules, so it is very important of making it to let the firewall work well. This paper is mainly an introduction on a description method based on decision tree for firewall policy. Using the theoretical manner of graph theory to describe the abstract firewall policy into concrete ones, we could design and scheme it. In this way, the conflicts of firewall policy are avoidable, and the firewall can work efficiently without so many abundant rules.