The Research And Design Of A Firewall Configure File Parser Base On Content Free Grammar

With the rapid development of the Internet technology, people are paying more and more attention to the network security field, and many kinds of firewalls are widely using in the network. However, with the incensement of firewall number, there are appeared a lot of problems associated with the configuration of the firewall in the network, for example, network fault by configuration errors or a plurality of firewall configuration consistency of network performance issues etc. So we need a firewall configuration audit system, to configure the information hidden trouble is found in the network firewall, and corresponding optimization. And in this audit system, firewall configuration file parse becomes the core important module, it not only need to parse variety firewall configuration files, but also need to parse them into unified form for storage. In this paper, I design and implement such a system that can process various types of firewall configuration file parser.The innovation point of this paper is:study from the compilation principle and find context free grammar, then according to the actual situation of firewall configuration files, design and implement a firewall configuration file parser architecture and solutions to improve the firewall configuration files’ parsing.The main work of this paper includes:firstly, analysis two kinds of firewall configuration files and their grammar; secondly, according to the two types of firewall configuration file, design their abstract context free grammar; thirdly, design the overall framework of extensible firewall configuration file parser and implement them; fourth, testing of each module, and integrated this parser into the firewall configuration audit system.