• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Parallel and Distributed Systems, IEEE Transactions on >Compressing Network Access Control Lists
【24h】

Compressing Network Access Control Lists

机译：压缩网络访问控制列表

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

An access control list (ACL) provides security for a private network by controlling the flow of incoming and outgoing packets. Specifically, a network policy is created in the form of a sequence of (possibly conflicting) rules. Each packet is compared against this ACL, and the first rule that the packet matches defines the decision for that packet. The size of ACLs has been increasing rapidly due to the explosive growth of Internet-based applications and malicious attacks. This increase in size degrades network performance and increases management complexity. In this paper, we propose ACL Compressor, a framework that can significantly reduce the number of rules in an access control list while maintaining the same semantics. We make three major contributions. First, we propose an optimal solution using dynamic programming techniques for compressing one-dimensional range-based access control lists. Second, we present a systematic approach for compressing multidimensional access control lists. Last, we conducted extensive experiments to evaluate ACL Compressor. In terms of effectiveness, ACL Compressor achieves an average compression ratio of 50.22 percent on real-life rule sets. In terms of efficiency, ACL runs in seconds, even for large ACLs with thousands of rules.
机译：访问控制列表（ACL）通过控制传入和传出数据包的流来为专用网络提供安全性。具体而言，以一系列（可能是冲突的）规则的形式创建网络策略。将每个数据包与此ACL进行比较，该数据包匹配的第一个规则定义了该数据包的决策。由于基于Internet的应用程序的爆炸性增长和恶意攻击，ACL的大小一直在迅速增加。大小增加会降低网络性能并增加管理复杂性。在本文中，我们提出了ACL Compressor，该框架可以在保持相同语义的同时显着减少访问控制列表中的规则数量。我们做出三大贡献。首先，我们提出了一种使用动态编程技术压缩一维基于范围的访问控制列表的最佳解决方案。其次，我们提出了一种用于压缩多维访问控制列表的系统方法。最后，我们进行了广泛的实验以评估ACL Compressor。在有效性方面，ACL Compressor在实际规则集上的平均压缩率为50.22％。就效率而言，即使对于具有数千个规则的大型ACL，ACL仍可在几秒钟内运行。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号