Network management device, network management method, network management program, and network system

摘要

To provide a network management apparatus, a network management method, a network management program, and a network system in which the validity of security policy can be easily verified.SOLUTION: A network management apparatus includes an acquisition unit that acquires a plurality of rules for restricting communication on the basis of a range of packet addresses, a dividing unit that divides an entire set of address ranges of the plurality of rules into a plurality of disjoint subsets on the basis of an inclusion relationship of address ranges between the rules, an extraction unit that extracts a subset included in the address range from the plurality of subsets, for each of the rules, a determination unit that determines an inclusion relationship of a subset with another rule having a higher priority than the rule, and determines the disposition of the rule on the basis of the determination result of the inclusion relationship of the subset, and an output unit that outputs image data indicating the disposition of the rule and the inclusion relation of the subset.SELECTED DRAWING: Figure 10