期刊文献+

基于多槽哈夫曼Trie树的规则引擎快速匹配算法 被引量:3

A Fast Matching Algorithm for Rule Engines Based on Multi-Slot Hafuman Trie Tree
下载PDF
导出
摘要 为了提高机场类企业数据在海量规则集合中的匹配能力,提出了基于多槽哈夫曼Trie树(MSTHTrie)的规则引擎快速匹配算法。该算法充分利用了规则点属性名数与规则条数之间的不对称特性,将对规则的线性比对转换为对多槽的并行比对,从而在稳定的空间复杂度下提高了规则引擎的匹配效率。首先对通用规则进行了严格的形式化描述,并在合理假设条件下证明了槽内规则分布命题和动作数定理;然后基于动作数定理提出了简化操作符的MSH tree算法;随之扩展操作类型提出了MSHTrie算法,使规则引擎有了普适性;最后在国内枢纽机场的业务数据上完成对比实验,表明新算法在空间复杂度上较传统线性匹配算法节约了52.6%,匹配性能上与Policytree算法相比提高了21.3%。 In order to improve the matching rate for business data with massive rules,a fast matching algorithm of rule engines named Multi_Slot Hafuman Trie Tree(MSTHTrie) was proposed.It changed rule's Linear matching into Multi_Slot matching by using the asymmetry of number between rule point's attributes and rules.The concepts of general rule was proposed,and the theorem of rule distributing in slot and action number was proved.The MSHTree algorithm was proposed by reducing operator,and the improved MSHTrie algorithm was proposed by extended operators.Extensive experiments over real data of Hub Airport showed the effectiveness of MSHTree algorithm and MSHTrie algorithm.The average Space complexity is decreased by 52.6% and matching time is decreased by 21.3% when it is compared with traditional Linear matching and Policytree.
出处 《四川大学学报(工程科学版)》 EI CAS CSCD 北大核心 2011年第5期102-108,共7页 Journal of Sichuan University (Engineering Science Edition)
基金 国家自然科学基金资助项目(60773169) 中国民用航空局科研项目(MHRD200924)
关键词 规则引擎 匹配 多槽 哈夫曼树 TRIE树 rule engines matching Multi-Slot Hafuman Tree Trie Tree
  • 相关文献

参考文献9

  • 1Al-Shaer E S, Hamed H H. Conflict classification and analysis of distributed firewall policies [ J ]. IEEE Journal on Selected Areas in Communications--JSAC, 2005,23 ( 10 ) : 2069 - 2084.
  • 2田大新,刘衍珩,李永丽,唐怡.数据包过滤规则的快速匹配算法和冲突检测[J].计算机研究与发展,2005,42(7):1128-1135. 被引量:14
  • 3Cuppens F, Cuppens B N, Garc' a A J. Detecting and removal of firewall misconfiguration[ C ]//Proceeding(499) Communication, Network, and Information Security. 2005.
  • 4Eronen P, Zitting J. An expert system for analyzing firewall rules [ C ]//Proceedings of the 6^th Nordic Workshop on Secure. 2001.
  • 5A1-Shaer E S, Hamed H H. Discovery of Policy Anomalies in Distributed Firewalls [ C ]. INFOCOM 2004, Twenty-third Annum Joint Conference of the IEEE Computer and Communications Societies ,2004.
  • 6Qiu Lili, Varghese G, Suri S. Fast Firewall Implementations for Software and Hardware-based Routers [ C ]//Proceeding, SIGMETRICS'01 Proceedings of the 2001 ACM SIGMET- RICS International Conference on Measurement and Modeling of Computer Systems. 2001.
  • 7谷晓钢,江荣安,赵铭伟.Snort的高效规则匹配算法[J].计算机工程,2006,32(18):155-156. 被引量:16
  • 8王永亮,陈性元,吴蓓,代向东,彭军.基于多维整数空间的安全策略冲突检测与消解[J].计算机工程,2009,35(4):134-136. 被引量:4
  • 9李鑫,季振洲,刘韦辰,胡铭曾.防火墙过滤规则集冲突检测算法[J].北京邮电大学学报,2006,29(4):90-93. 被引量:6

二级参考文献33

  • 1杨武,方滨兴,云晓春,张宏莉,胡铭曾.一种高性能分布式入侵检测系统的研究与实现[J].北京邮电大学学报,2004,27(4):83-86. 被引量:14
  • 2云晓春,余翔湛.基于确认度失效检测算法的研究与设计[J].北京邮电大学学报,2005,28(3):10-13. 被引量:7
  • 3Gao Zhuomin. Conflict Handling in Policy-based Security Management[D]. Gainesville, USA: University of Florida, 2002.
  • 4Al-Shaer E S, Hamed H H. Discovery of Policy Anomalies in Distributed Firewalls[C]//Proc. of the 23rd IEEE Computer and Communications Societies Annual Joint Conference. Chicago, USA: [s. n.], 2004.
  • 5Cuppens F, Cuppens B N, Garc'a A J. Detecting and Removal of Firewall Misconfiguration[EB/OL]. (2005-02-25). http://www. rennes.enst-bretagne.fr/~fcuppens/articles/cnis05.pdf.
  • 6Eronen P, Zitting J. An Expert System for Analyzing Firewall Rules[EB/OL]. (2001-11-05). http://www.niksula.hut.fi/-peronen/publications/nordsec_2001 .pdf.
  • 7代向东,陈性元,吴蓓,牛新建.一种可扩展的安全策略翻译技术[J].计算机工程,2007,33(16):136-138. 被引量:1
  • 8R. Hunt, T. Verwoerd. Reactive firewalls-A new technique.Computer Communications, 2003, 26(12): 1302-1317
  • 9D. Wang, R. Hao, D. Lee. Fault detection in rule-based software systems. Information and Software Technology, 2003,45(12): 865~871
  • 10P. Gupta, N. McKeown. Packet classification on multiple fields.ACM SIGCOMM' 99, Harvard University, 1999. http: //yuba. Stanford. edu/~ pankaj/paps/sig9. pdf

共引文献35

同被引文献24

引证文献3

二级引证文献6

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部