Detection Algorithm for Firewall Policy Based on LE-Trie
Liu Jun-jun · Jisuanji gongcheng · 2010
The firewall policy is a sequence of rules set,so it is very important to make the firewall work well and it must be without any conflicts.This paper introduces a description method based on LE-Trie data structure for firewall policy conflict detecting.Simulation result shows that using the LE-Trie storage rule table to describe the firewall policy can use less memory than the ordinary ones,and it can get a higher search speed as detecting conflicts.