Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

Computer Engineering ›› 2006, Vol. 32 ›› Issue (6): 183-185.

• Security Technology • Previous Articles     Next Articles

Design of a Packet Filter Rule Set Based on Binary Decision Diagram

JI Li1, ZHU Na2   

  1. 1. Department of Information Science, Nantong Textile Vocational Technology College, Nantong 226007;2. Department of Computer Science and Telecommunications Engineering, Jiangsu University, Zhenjiang 212013
  • Online:2006-03-20 Published:2006-03-20

一种基于二叉判定图的包过滤规则设计方法

季 莉1,朱 娜2   

  1. 1. 南通纺织职业技术学院信息系,南通 226007;2. 江苏大学计算机科学与通信工程学院,镇江 212013

Abstract: This paper presents a new algorithm for representing such lists as a BDD. The algorithm for converting rule sets into a Boolean formula has been tested on some synthetic test cases. The result is encouraging since it shows that the BDD representation is feasible and that lookup can be done very quickly.

Key words: Packet filter; Binary decision diagram; Rule list

摘要: 提出了一种采用二叉判定图来表示规则集的新的算法,通过仿真实验证明:对于较大规模的规则集,基于BDD 的包过滤规则设计方法简洁可行,且在存储空间和查询性能上要优于传统的线性顺序方法。

关键词: 包过滤;二叉判定图;访问列表