Research On Packet Filtering And Security Control Strategies For Internetworking

As more abnormal users and attacks occur in the Internet,security and stability of networks have been seriously threatened.Packet filtering and security control strategy,two main parts of network security have always played important roles in security controlling of internetworking and provided a credible protection.However,with the development of the network,the amount of users and devices has been increasing year by year,making network more complex.Therefore,new demands have been called upon protection measures.To summeraize,this paper does the following work for packet filtering and security control strategies involved in network security protection:(1)An improved packet classification algorithm HRFC(Hybird Recursive Flow Classification)based on dynamic partition of multidimensional space and RFC(Recursive Flow Classification)is proposed.The algorithm completes dynamic partition of multidimensional space of rule set by decision tree,and maps each subset by multistage reduction tree,thus realizing fast and efficient packet classification.(2)An analytical conversion method of interconnected security control strategy based on rules is proposed.The method firstly pre-processes the strategy,and then combines the characteristics of word,part of speech and phrase structure,through the steps of action and object extraction,constraint structure identification,object mapping to achieve the analytical conversion of the policy statement to the formal rules.(3)Experimental simulation of the above methods,and analyze the test results.The experimental results show that the proposed algorithm HRFC can effectively reduce the space overhead while guaranteeing the classification speed,and achieve fast and efficient data packet classification.It has certain practical value for multi-dimensional classification problems,such as packet filtering.In addition,Based on Python,the paper implements the mapping method of security control strategy to structured rules,and carries out feasibility verification and performance analysis.