论文部分内容阅读
为解决包过滤防火墙规则数目不断增加导致的存储空间膨胀和过滤速度降低的问题,提出一种基于有序二叉决策图与线性列表的混合结构(OBDD-LIST)的批处理包过滤防火墙算法.首先依据规则各域的特征属性对规则筛选分类,并使用位级别压缩的方式重新设计防火墙的规则库;然后基于连续传入的数据包包头信息具有相似性的特征,利用有序二叉决策图无冗余、无回溯的优势,采用批处理的思想过滤数据包;最后,通过开源软件Class Bench生成的高仿真数据包进行了仿真实验,证明本文算法在存储空间、匹配速率上具有较大的优势,有效提高了防火墙的性能.
In order to solve the problem of storage space expansion and filtering speed reduction due to the increasing number of packet filtering firewall rules, a batch packet filtering firewall algorithm based on ordered binary decision diagram and linear list mixed structure (OBDD-LIST) is proposed. Firstly, the rules are classified according to the characteristic attributes of each rule, and the rule base of the firewall is redesigned by means of bit-level compression. Secondly, based on the characteristics of the packet headers with continuous incoming information, No redundancy and no backtracking. The data packet is filtered by the idea of batch processing. Finally, a simulation experiment is carried out on the high simulation data packet generated by the open source software Class Bench, which proves that the algorithm in this paper has larger storage rate and matching rate Advantage, effectively improve the performance of the firewall.