基于动态模板的策略翻译及配置方法

Policy translation and configuration using dynamic template

为解决大型系统中大量设备配置方式多样性导致人工安全设备配置复杂烦琐、容易出错、效率低下的问题,设计了一种基于动态模板的策略翻译及配置方法。通过构建基于编码的策略翻译模板,利用编码简单、通用、易计算的特点,指导归一化策略向设备个性化配置命令行转换,同时通过关键词对比法,保证策略配置的准确性。实验分析结果证明,所提策略翻译及配置方法具有强扩展性和高准确度。

To solve the problem of complex,cumbersome and error-prone configuration of security devices caused by the heterogeneous configuration modes in complex networks,a dynamic template-based scheme for translating and configuring policy was proposed.In detail,considering the code’s features,the code-based template for translating policies was constructed to configure the command line conversion,and the keyword comparison method was used to ensure the accuracy of policy configuration.Experiments show that the scalability and the accuracy of the proposed scheme.