Once a new rule is inserted, security policy tree is traversed to verify if the conflict conditions are satisfied while the type and position of conflicts can be reported correctly.
每当有新加入的规则,就遍历安全策略树,检验新规则与已有规则是否满足各类冲突的形式化定义,如果满足,则可以准确的报告发生冲突的规则及冲突的类别。
参考来源 - IPSec安全策略冲突检测算法的研究·2,447,543篇论文数据,部分数据来源于NoteExpress
应用推荐