Article(id=1242120621065310249, tenantId=1146029695717560320, journalId=1146031591421210625, issueId=1242120596776096697, articleNumber=null, orderNo=null, doi=null, pmid=null, cstr=null, oa=null, hot=null, price=null, onlineType=0, articleFormat=0, articleType=null, articleTypeStr=null, receivedDate=1270483200000, receivedDateStr=2010-04-06, revisedDate=1283097600000, revisedDateStr=2010-08-30, acceptedDate=null, acceptedDateStr=null, onlineDate=1285603200000, onlineDateStr=2010-09-28, pubDate=1285603200000, pubDateStr=2010-09-28, doiRegisterDate=null, doiRegisterDateStr=null, onlineIssueDate=1285603200000, onlineIssueDateStr=2010-09-28, onlineJustAcceptDate=null, onlineJustAcceptDateStr=null, onlineFirstDate=null, onlineFirstDateStr=null, sourceXml=null, magXml=null, createTime=1774074233543, creator=sys-migrate, updateTime=1774074233543, updator=sys-migrate, issue=Issue{id=1242120596776096697, tenantId=1146029695717560320, journalId=1146031591421210625, year='2010', volume='28', issue='18', pageStart='3', pageEnd='140', issueExtLink='null', onlineDate='null', pubDate='1285603200000', pubDateStr='2010-09-28', beforeIssueId=null, nextIssueId=null, price=null, status=1, issueComplete=1, articleOrder=3, issueType=-1, specialIssue=null, createTime=1774074227753, creator='sys-migrate', updateTime=1774074227753, updator='sys-migrate', preIssue=null, nextIssue=null, articleTotal=null, ext=null, issueFiles=null, downloadFileDto=null}, startPage=80, endPage=83, ext={EN=ArticleExt(id=1242120623745467319, articleId=1242120621065310249, tenantId=1146029695717560320, journalId=1146031591421210625, language=EN, title=An Efficient Disposition Algorithm for Packet Filters, columnId=1242116080374710456, journalTitle=Science & Technology Review, columnName=Articles, runingTitle=null, highlight=null, articleAbstract=Packet filtering of the router is the first defense line for the network security and plays a crucial role. The current studies focus on the data packet detection and filtering, without due consideration of the packet filter device deployment. If the packet filter is deployed properly, the network performance and efficiency can be significantly improved. Packet filters are always placed on the border of the administrative network, the boundaries between trusted and non-trusted networks. Generally, the packet filters are placed on the router in the border of the network, and a tremendous amount of time and space would be consumed, that results in time-delay and congestion, and hampers the efficiency of the network. In this paper, a new disposition algorithm is proposed. To compare various kinds of risks in the border and to remove the edge with operation risks, the packet filters can be placed in an efficient way by generating a shortest border, to provide a perfect protection for trusted networks between the internal network nodes. Experiment results show that the number of packet filters is reduced by 20% to 50%. The network delay time is reduced and the network connectivity is improved., authors=null, authorsList=null, authorCompany=null, correspAuthors=null, authorNote=null, correspAuthorsNote=Jie Wang, copyrightStatement=null, copyrightOwner=null, extLink=null, articleAbsUrl=null, sourceXml=null, magXml=null, pdfUrl=null, pdf=/1H42YHEQoQ+VHSCbacc1g==, pdfFileSize=791699, pdfExtLink=null, richHtmlUrl=null, mobilePdfUrl=null, reviewReport=null, pdfFirstPage=null, abstractGraph=null, abstractGraphContent=null, abstractVideo=null, citation=null, cebUrl=null, magXmlContent=null, mapNumber=null, fund=null), CN=ArticleExt(id=1242120622906606510, articleId=1242120621065310249, tenantId=1146029695717560320, journalId=1146031591421210625, language=CN, title=高效数据包过滤器部署算法, columnId=1146540929516700224, journalTitle=科技导报, columnName=研究论文, runingTitle=null, highlight=null, articleAbstract=整合在路由器上的数据包过滤功能是网络安全的第一道防线,对保护网络的安全有着至关重要的作用。当前的研究主要侧重于对数据包的检测和过滤,忽略了数据包过滤器的部署问题,如果对其部署得当,能极大改善网络的性能和效率。在大规模的网络中,数据包过滤器被部署在管理网络的边界上,即信任网络和非信任网络之间。一般情况下,数据包过滤器被部署在网络边界的每一个路由器上,由于需要遍历路径上的过滤器,大量的时间和空间被消耗,容易造成时延、拥塞、丢包等问题,降低网络的效率。本文依据最短路径优先的思想,提出了一种新的部署算法,通过对比边界上各种风险,移除有操作风险的边界,产生一条最短虚拟路径,更加有效地部署过滤器的位置,给内部节点之间的信任网络提供保护,并使用基于风险的方法对虚拟边界进行离线计算。实验结果表明,使用该算法后,过滤器的数量减少20%~50%,网络的延迟时间变小,网络的连通性也得到改善。, authors=王 杰,董鹏飞,李 振, authorsList=王 杰;董鹏飞;李 振, authorCompany=郑州大学电气工程学院,郑州 450001, correspAuthors=null, authorNote=null, correspAuthorsNote=王杰, copyrightStatement=null, copyrightOwner=null, extLink=null, articleAbsUrl=null, sourceXml=null, magXml=null, pdfUrl=null, pdf=MLXw6TD6szNuxH5gIMHT8w==, pdfFileSize=791699, pdfExtLink=null, richHtmlUrl=null, mobilePdfUrl=null, reviewReport=null, pdfFirstPage=null, abstractGraph=null, abstractGraphContent=null, abstractVideo=null, citation=null, cebUrl=null, magXmlContent=null, mapNumber=null, fund=null)}, authors=null, keywords=[Keyword(id=1242120622571062186, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=CN, orderNo=1, keyword=网络安全), Keyword(id=1242120622638171051, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=CN, orderNo=1, keyword=最优过滤器部署), Keyword(id=1242120622713668524, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=CN, orderNo=1, keyword=数据包过滤器), Keyword(id=1242120622780777389, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=CN, orderNo=1, keyword=最短路径), Keyword(id=1242120623384757170, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=EN, orderNo=1, keyword=network security), Keyword(id=1242120623468643251, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=EN, orderNo=1, keyword=optimal filter placement), Keyword(id=1242120623544140724, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=EN, orderNo=1, keyword=packet filter), Keyword(id=1242120623611249589, tenantId=1146029695717560320, journalId=1146031591421210625, articleId=1242120621065310249, language=EN, orderNo=1, keyword=the shortest path)], refs=null, funds=null, companyList=null, figs=null, attaches=null, journal=Journal(id=1125356956822126595, delFlag=0, nameCn=科技导报, nameEn=Science & Technology Review, nameHistory1=null, nameHistory2=null, issn=1000-7857, eissn=, cn=11-1421/N, coden=null, periodic=3, language=CN, oaType=0, ccby=null, superviseOffice=null, ownerOffice=null, pubOffice=null, editorOffice=null, officeType=null, aims=null, clcCode=null, officeProv=null, officeCity=null, officeAddr=null, officeZip=null, officeEmail=null, officePhone=null, editDirector=null, officeDirector=null, officeDirectorPhone=null, officeStaffNum=null, officeEmpNum=null, coverPicUrl=wfghvu3bhh/dKxuZ+ucVHA==, journalPrice=null, startedYear=null, abbrevIsoEn=Sci Technol Rev, journalRemark=null, publicationField=null, createdTime=null, updatedTime=1774230116083, createdBy=null, updatedBy=13041195026, firstLetterCn=S, firstLetterEn=S, subjectCode=Natural Sciences, subjectName=自然科学, subjectCodeEn=Natural Sciences, subjectNameEn=null, picCn=wfghvu3bhh/dKxuZ+ucVHA==, picEn=yjSfclmpNm7ihn9NbTZ69g==, jcr=null, cjcr=null, exts=[JournalExt(id=1242774439910290156, language=CN, name=科技导报, nameHistory1=null, nameHistory2=null, managedBy=中国科学技术协会, sponsoredBy=中国科学技术协会, publishedBy=科技导报社, editorOffice=, officeProv=null, officeCity=null, officeAddr=, officeZip=, editDirector=, officeDirector=null, officePhone=null, coverPicUrl=null, journalRemark=, submitArticleUrl=null, websiteUrl=http://www.kjdb.org/CN/home, createdTime=1774230116107, updatedTime=1774230116107, createdBy=13041195026, updatedBy=13041195026, submissionGuidelinesUrl=http://www.kjdb.org/CN/column/column7.shtml, submissionAuthorUrl=https://kjdbauthor.cast.org.cn/webm, submissionEditorUrl=https://kjdbeditor.cast.org.cn/webm/, submissionReviewUrl=https://kjdbauthor.cast.org.cn/webm, submissionCeEditorUrl=https://kjdbeditor.cast.org.cn/webm/, submissionAeEditorUrl=https://kjdbeditor.cast.org.cn/webm/, option={"copyright":""}), JournalExt(id=1242774439960621805, language=EN, name=Science & Technology Review, nameHistory1=null, nameHistory2=null, managedBy=, sponsoredBy=, publishedBy=, editorOffice=, officeProv=null, officeCity=null, officeAddr=, officeZip=, editDirector=, officeDirector=null, officePhone=null, coverPicUrl=null, journalRemark=, submitArticleUrl=null, websiteUrl=http://www.kjdb.org/EN/home, createdTime=1774230116119, updatedTime=1774230116119, createdBy=13041195026, updatedBy=13041195026, submissionGuidelinesUrl=http://www.kjdb.org/EN/column/column7.shtml, submissionAuthorUrl=https://kjdbauthor.manuscriptcloud.com/login, submissionEditorUrl=https://kjdbeditor.manuscriptcloud.com/login, submissionReviewUrl=https://kjdbauthor.manuscriptcloud.com/login, submissionCeEditorUrl=https://kjdbeditor.manuscriptcloud.com/login, submissionAeEditorUrl=https://kjdbeditor.manuscriptcloud.com/login, option={"copyright":""})], databaseList=null, tenantJournalId=1146031591421210625, websiteList=[Website(id=1146104741081231361, webName=null, webTitle=null, webDomain=null, webCopyrigh=null, webIpcNo=null, seoTitle=null, seoKeywords=null, seoDescription=null, tenantJournalId=null, journalId=1146031591421210625, journalNameCn=null, journalNameEn=null, grayFlag=null, tenantId=1146029695717560320, platformId=null, journalGroupId=null, journalGroupNameCn=null, journalGroupNameEn=null, type=1, domain=https://castjournals.cast.org.cn/joweb/kjdb/CN, language=CN, createTime=1751182263881, createBy=18614031015, updateTime=1751778001962, updateBy=18614031015, name=科技导报, tplId=1146099689490845704, title=科技导报, delFlag=0, indexPage=/home, props=[WebsiteProps(id=1148021146403992296, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146104741081231361, code=articleTextType, value=kx, createTime=1751639170504, updateTime=1751639170504, creator=18614031015, updator=18614031015), WebsiteProps(id=1148021146378826469, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146104741081231361, code=banner, value=null, createTime=1751639170498, updateTime=1751639170498, creator=18614031015, updator=18614031015), WebsiteProps(id=1148021146366243556, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146104741081231361, code=logo, value=https://castjournals.cast.org.cn/joweb/kjdb/CN/file/pic?fileId=9GHSf7eGlIPH0Tv/OOdstA==, createTime=1751639170495, updateTime=1751639170495, creator=18614031015, updator=18614031015), WebsiteProps(id=1148021146395603687, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146104741081231361, code=picServerUrl, value=https://castjournals.cast.org.cn/joweb/kjdb/CN/file/pic, createTime=1751639170502, updateTime=1751639170502, creator=18614031015, updator=18614031015), WebsiteProps(id=1148021146387215078, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146104741081231361, code=staticResourcePath, value=https://castjournals.cast.org.cn/joweb/cast_kjdb_cn_619/, createTime=1751639170500, updateTime=1751639170500, creator=18614031015, updator=18614031015)]), Website(id=1146105254833139715, webName=null, webTitle=null, webDomain=null, webCopyrigh=null, webIpcNo=null, seoTitle=null, seoKeywords=null, seoDescription=null, tenantJournalId=null, journalId=1146031591421210625, journalNameCn=null, journalNameEn=null, grayFlag=null, tenantId=1146029695717560320, platformId=null, journalGroupId=null, journalGroupNameCn=null, journalGroupNameEn=null, type=1, domain=https://castjournals.cast.org.cn/joweb/kjdb/EN, language=EN, createTime=1751182386363, createBy=18614031015, updateTime=1753500121937, updateBy=18614031015, name=科技导报, tplId=1146101810881728533, title=Science & Technology Review, delFlag=0, indexPage=/home, props=[WebsiteProps(id=1155838567709528217, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146105254833139715, code=articleTextType, value=kx, createTime=1753502988984, updateTime=1753502988984, creator=18614031015, updator=18614031015), WebsiteProps(id=1155838567692750998, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146105254833139715, code=banner, value=null, createTime=1753502988980, updateTime=1753502988980, creator=18614031015, updator=18614031015), WebsiteProps(id=1155838567688556693, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146105254833139715, code=logo, value=https://castjournals.cast.org.cn/joweb/kjdb/EN/file/pic?fileId=9GHSf7eGlIPH0Tv/OOdstA==, createTime=1753502988979, updateTime=1753502988979, creator=18614031015, updator=18614031015), WebsiteProps(id=1155838567705333912, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146105254833139715, code=picServerUrl, value=https://castjournals.cast.org.cn/joweb/kjdb/EN/file/pic, createTime=1753502988983, updateTime=1753502988983, creator=18614031015, updator=18614031015), WebsiteProps(id=1155838567701139607, tenantId=1146029695717560320, journalId=null, journalGroupId=null, siteId=1146105254833139715, code=staticResourcePath, value=https://castjournals.cast.org.cn/joweb/cast_kjdb_en_623/, createTime=1753502988982, updateTime=1753502988982, creator=18614031015, updator=18614031015)])], journalTitle=科技导报, weixinUrl=null, journalUrl=null, iacademicId=null, status=1, seqNo=null, journalTitleEn=Science & Technology Review, journalPhotoCn=wfghvu3bhh/dKxuZ+ucVHA==, journalPhotoEn=yjSfclmpNm7ihn9NbTZ69g==, journalFirstLetter=S, journalRecommend=null, journalNew=null, journalCollection=1, jcrJf=null, cjcrJf=0.91, jcrJfStr=null, cjcrJfStr=null, submissionFirstDecision=null, sciSubjectClassification=null, casSubjectClassification=null, citeScore=null, totalCitationFrequency=null, icpCode=null, psCode=null, advertisingLicenseCode=null, copyrightInformation=null, country=null, option=, provinceCode=null, provinceName=null, collectFlag=false, interPubPlatform=null, interPubPlatformUrl=null), detailUrlCn=https://castjournals.cast.org.cn/joweb/kjdb/CN/Y2010/V28/I18/80, detailUrlEn=https://castjournals.cast.org.cn/joweb/kjdb/EN/Y2010/V28/I18/80, pdfUrlCn=https://castjournals.cast.org.cn/joweb/kjdb/CN/PDF/Y2010/V28/I18/80, pdfUrlEn=https://castjournals.cast.org.cn/joweb/kjdb/EN/PDF/Y2010/V28/I18/80, aliStartDate=null, aliEndDate=null, collectionFlag=false, citedCount=null, citedUrl=null, previewStatus=0, delFlag=0, hasFullText=0, orderTime=1285603200000, fullTextJson=null, articleText=null, reference=null)
收藏切换
高效数据包过滤器部署算法
收藏切换
PDF下载
科技导报 | 研究论文 2010,28(18): 80-83
收起
收藏切换
科技导报 | 研究论文 2010, 28(18): 80-83
高效数据包过滤器部署算法
全屏
王 杰,董鹏飞,李 振
作者信息
    郑州大学电气工程学院,郑州 450001

通讯作者:

王杰
An Efficient Disposition Algorithm for Packet Filters
Affiliations
出版时间: 2010-09-28
文章导航
收藏切换
整合在路由器上的数据包过滤功能是网络安全的第一道防线,对保护网络的安全有着至关重要的作用。当前的研究主要侧重于对数据包的检测和过滤,忽略了数据包过滤器的部署问题,如果对其部署得当,能极大改善网络的性能和效率。在大规模的网络中,数据包过滤器被部署在管理网络的边界上,即信任网络和非信任网络之间。一般情况下,数据包过滤器被部署在网络边界的每一个路由器上,由于需要遍历路径上的过滤器,大量的时间和空间被消耗,容易造成时延、拥塞、丢包等问题,降低网络的效率。本文依据最短路径优先的思想,提出了一种新的部署算法,通过对比边界上各种风险,移除有操作风险的边界,产生一条最短虚拟路径,更加有效地部署过滤器的位置,给内部节点之间的信任网络提供保护,并使用基于风险的方法对虚拟边界进行离线计算。实验结果表明,使用该算法后,过滤器的数量减少20%~50%,网络的延迟时间变小,网络的连通性也得到改善。
网络安全  /  最优过滤器部署  /  数据包过滤器  /  最短路径
Packet filtering of the router is the first defense line for the network security and plays a crucial role. The current studies focus on the data packet detection and filtering, without due consideration of the packet filter device deployment. If the packet filter is deployed properly, the network performance and efficiency can be significantly improved. Packet filters are always placed on the border of the administrative network, the boundaries between trusted and non-trusted networks. Generally, the packet filters are placed on the router in the border of the network, and a tremendous amount of time and space would be consumed, that results in time-delay and congestion, and hampers the efficiency of the network. In this paper, a new disposition algorithm is proposed. To compare various kinds of risks in the border and to remove the edge with operation risks, the packet filters can be placed in an efficient way by generating a shortest border, to provide a perfect protection for trusted networks between the internal network nodes. Experiment results show that the number of packet filters is reduced by 20% to 50%. The network delay time is reduced and the network connectivity is improved.
network security  /  optimal filter placement  /  packet filter  /  the shortest path
王 杰;董鹏飞;李 振. 高效数据包过滤器部署算法. 科技导报, 2010 , 28 (18) : 80 -83 .
. An Efficient Disposition Algorithm for Packet Filters[J]. Science & Technology Review, 2010 , 28 (18) : 80 -83 .
2010年第28卷第18期
PDF下载
170
64
引用本文
BibTeX
文章信息
  • 接收时间:2010-04-06
  • 首发时间:2010-09-28
  • 出版时间:2010-09-28
补充材料
相关文章
文章信息
作者
出版历史
  • 收稿日期:2010-04-06
  • 修回日期:2010-08-30
基金
作者信息

通讯作者:

王杰
参考文献
分享链接
https://castjournals.cast.org.cn/joweb/kjdb/CN/1242120621065310249
分享至
全文二维码

扫描看全文

引用本文
BibTeX
本文的引用情况
2种不同金属材料的力学参数

Family
属数
Number of
genus
种数
Number of
species
占总种数比例
Percentage of
total species (%)

Genus
种数
Number of
species
占总种数比例
Percentage of total
species (%)
鹅膏菌科Amanitaceae 2 11 5.26 鹅膏菌属 Amanita 10 4.78
小菇科 Mycenaceae 2 12 5.74 丝盖伞属 Inocybe 5 2.39
多孔菌科 Polyporaceae 8 14 6.70 蜡蘑属 Laccaria 5 2.39
红菇科 Russulaceae 3 23 11.00 小皮伞属 Marasmius 6 2.87
小菇属 Mycena 11 5.26
光柄菇属 Pluteus 5 2.39
红菇属 Russula 17 8.13
栓菌属 Trametes 5 2.39
关闭全屏