基于信任机制的网络防火墙状态检测模型

Network Firewall State Detection Model Based on Trust Mechanism

针对当前网络防火墙状态检测模型的网络安全置信度低,导致防火墙状态检测时间较长,服务器易受到攻击,检测准确率及防火墙安全性较低的问题,提出了基于信任机制的网络防火墙状态检测模型。分析防火墙安全性能,根据信任机制建立置信度,通过自适应阈值算法,判断网络是否存在攻击现象,并对数据包实施预处理,设置包过滤防火墙规则集,运用哈希表直接查询数据包,构建网络拓扑结构,建立防火墙状态检测模型,完成基于信任机制的网络防火墙状态检测模型。仿真结果表明,所提方法的检测准确率较高,能够缩短防火墙状态检测时间,服务器可以有效避免攻击,提高防火墙自身的安全性。

At present, the network security confidence of the network firewall status detection model is low, leading to long firewall state detection and low detection accuracy. Therefore, a model to detect network firewall states based on trust mechanisms was proposed. Firstly, we analyzed the security performance of the firewall and established the confidence level by the trust mechanism. Secondly, we used the adaptive threshold algorithm to judge whether there was an attack on the network and preprocessed the data packet. Moreover, we set the packet to filter the firewall ruleset and used the hash table to directly query the data packet and thus to construct network topology. Finally, we built a model to detect network firewall states based on trust mechanisms. Simulation results prove that the detection accuracy of the proposed method is high, and the time to detect firewall states can be shortened. The server can effectively avoid attacks and improve the security of the firewall.