作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2006, Vol. 32 ›› Issue (6): 183-185.

• 安全技术 • 上一篇    下一篇

一种基于二叉判定图的包过滤规则设计方法

季 莉1,朱 娜2   

  1. 1. 南通纺织职业技术学院信息系,南通 226007;2. 江苏大学计算机科学与通信工程学院,镇江 212013
  • 出版日期:2006-03-20 发布日期:2006-03-20

Design of a Packet Filter Rule Set Based on Binary Decision Diagram

JI Li1, ZHU Na2   

  1. 1. Department of Information Science, Nantong Textile Vocational Technology College, Nantong 226007;2. Department of Computer Science and Telecommunications Engineering, Jiangsu University, Zhenjiang 212013
  • Online:2006-03-20 Published:2006-03-20

摘要: 提出了一种采用二叉判定图来表示规则集的新的算法,通过仿真实验证明:对于较大规模的规则集,基于BDD 的包过滤规则设计方法简洁可行,且在存储空间和查询性能上要优于传统的线性顺序方法。

关键词: 包过滤;二叉判定图;访问列表

Abstract: This paper presents a new algorithm for representing such lists as a BDD. The algorithm for converting rule sets into a Boolean formula has been tested on some synthetic test cases. The result is encouraging since it shows that the BDD representation is feasible and that lookup can be done very quickly.

Key words: Packet filter; Binary decision diagram; Rule list