METHOD FOR ESTABLISHING DISTRIBUTED FILTERS IN A PACKET-ORIENTED NETWORK, BASED ON ABSTRACT SECURITY DEFAULTS

摘要

The invention relates to a method for a packet-oriented network. According to said method, after analysis of the network configuration and the existing network elements, the implementation of predefined security guidelines is automatically mapped onto the options of the different network elements and the distribution of the various security functions in the different network elements is optimised in such a way that (1) the protection target is achieved, (2) no network element receives too many configuration entries and (3) no redundant functions are implemented.