Dissertation > Excellent graduate degree dissertation topics show

Research of Key Technology of Firewall Security Policy Configuration

Author: RenZhanRui
Tutor: ZhaoGuoHong
School: National University of Defense Science and Technology
Course: Computer Science and Technology
Keywords: Firewall Policy language ExFlip Security policy BSG Collision detection
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 31
Quote: 0
Read: Download Dissertation

Abstract


Firewall as a network security protection equipment , its function is growing more and more complicated to use . Existing firewall policy configuration is very difficult to guarantee the security of their applications , does not meet user needs , there are inconsistencies rules abnormal . The security policy configuration become a hot topic . This article discusses the key technology is concentrated in two areas , the high - level description and the low-level firewall configuration generated firewall rules consistency conflict detection . The main duties include : First, the analysis of the current research status of high - level policy language can not describe a new type of firewall for the lack of authentication information and tunnel information for Flip senior policy language , a Flip extended firewall senior policy language ExFlip . The language inherited the the Flip language of grammar , the description of the VPN policy and certification strategy , further enhance the description capability of the firewall policy . Secondly, the the strongman architecture , for the lack of information granularity in the system as well as strategies detection and management , design a strategy for the deployment process , the security needs of the user , the network information and authentication information automatically into the firewall policy configuration , omit the configuration configuration details in the process , greatly improve the efficiency of the policy configuration to ensure the correctness of the policy deployment . Again , summarizes the the firewall rules abnormal classification and anomaly detection algorithm for the detection efficiency is not high , the duplicate detection service packet - based firewall policy conflict detection algorithm BSG . The algorithm can be efficiently rules that may exist in the firewall rules abnormality accurately positioning alarm performance exceeds the highest detection efficiency Fireman algorithm . Finally , based on the above work to achieve a firewall configuration generation and testing of a prototype system , and its function testing and validation , and data analysis .

Related Dissertations

  1. Study on Model-Based Visualization of Rice Roots,S511
  2. Key Technologies of Modeling and Simulation in Virtual Surgery,TP391.41
  3. French strategy to safeguard the rights of adult learning,G720
  4. Huaiyin Institute of Technology campus card system design and security policy,TP393.18
  5. Research on Checking and Digesting Policy Conflicts Under Multi-Policy Environments,TP393.08
  6. Research and Implementation of Information Security Strategy in Electric Enterprises,TP393.08
  7. Design and Implementation of Assistant Management System Server Based on Hardware Firewall,TP393.08
  8. Firewall and three switch - based campus network security policy research,TP393.08
  9. Gansu Fuyuan Chemical analysis and design of integrated office platform,TP311.52
  10. The Design and Implementation of A Military University Network in Security and Reliability,TP393.18
  11. Direct3D-based 3D flight shooting game research,TP393.09
  12. Logically oriented virtual domain multi -level access control system,TP309
  13. Fast protocol identification based firewall system design and implementation,TP393.08
  14. Design and Implementation of Virtual Campus Roaming System of Hebei Tourism Professional College,TP391.9
  15. OGRE -based plastics calendering 3D Simulation System Design and Implementation,TP391.9
  16. System Automation row of teeth and Implementation,R783
  17. Rule-based access control model and application,TP393.08
  18. Firewall policy conflict detection and visualization,TP393.08
  19. Vehicle driving simulator visual simulation technology research,TP391.9
  20. Research on Trojan Horse Transmis Sion Technology Based on HTTPS and WEB SERVICE Shanghai Jiao Tong University,TP393.08
  21. Research and Implementation of High Performance Rule Matching Key Technology for IPv6 Firewall,TP393.08

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile