工业防火墙规则生成与优化的自学习方法

摘要

To make the rule setting more convenient,a self-learning method for the generation and optimization of industrial fire-wall rules was presented.According to packet capturing and analyzing,the data preprocessing was accomplished.The firewall rule set was generated by the self-learning module.The rule set was optimized to reduce the number of rules and shorten the packet matching length.Experimental and comparative results show that the proposed method reduces the packet matching time and has more obvious advantages with the number of rules increases.%为更加方便快捷地设置工业防火墙规则，提出一种工业防火墙规则生成与优化的自学习方法。根据数据包捕获和分析进行数据预处理，通过自学习模块产生防火墙规则集，针对规则集进行合并优化，减少规则数目，缩短数据包匹配长度。实验数据对比分析结果表明，该方法降低了数据包匹配时间，随着规则数目的增加该优势更加明显。