目前,在防火墙规则冲突检测算法中,效率问题一直没有很好的解决,当防火墙规则数目较大时,检测规则冲突的速度很难满足客户的需要。为了能够快速地检测出防火墙中的规则冲突,在目前使用较多的ASBV算法上提出一种规则冲突检测算法(DBBV算法)。该算法采用的方法是使用位向量和分治技术,该设计在检测规则冲突的时候,设计的算法只是进行了一次位运算。同时该算法采用的是范围形式的规则集。经过对算法详细的分析,以及通过实验方法的验证,改进的DBBV算法的规则冲突检测效率明显高于ASBV算法。
The current conflict detection algorithm has low efficiency, detection rule conflict speed can not meet the needs of users when existing large amount of firewall rule. In view of this situation,based on ASBV algorithm,put forward a kind of conflict detection algo- rithrn DBBV. The algorithm used is divided conquer and bit vector technology, in the rule component process, DBBV algorithm will have a bit vector intersection. Simultaneously DBBV algorithm adopts range representation of a rule set. Based on the algorithm analysis de- tailed, verification with experiment way, found that DBBV algorithm for the detection of rule conflict is faster than ASBV algorithm.