Conflict detection method for URL rules

Abstract

The invention provides a conflict detection method for URL rules. The method includes the following steps: firstly, performing node splitting on URL entries, reducing the particularity of a first-level directory, taking the first-level directory and other levels of directories as normal paths for processing, and then performing conflict detection in segments. According to the scheme of the invention, the repeated application of nodes can be reduced, resources can be saved, a small conflict domain can be realized, the number of comparisons of character strings can be effectively reduced, and high rule conflict detection performance can be achieved. Compared with URL_HAVL and URL_WM algorithms, the accuracy of the method in rule conflict detection is about 10% to 20% higher on average, and the minimum accuracy is maintained above 70%. In conclusion, the advantages of the method are that: a small increase in time complexity cost is used to exchange the higher accuracy, and the scheme hasan obvious effect on the conflict detection of the URL rules.

Description

technical field [0001] The invention relates to a method for detecting a WEB security gateway, in particular to a method for detecting the conflict of URL items in the rules of the WEB security gateway. Background technique [0002] The destination of the detected data traffic in the WEB security gateway needs to be specified by rules. Because the conflict between the rules and the size of the rule set will seriously affect the function and performance of the WEB security gateway, if the rules can be optimized, the data packet processing delay will be greatly reduced, thereby improving the performance of the WEB security gateway. Traditional firewall rules only contain information at the network layer and transport layer, and cannot provide protection at the application layer. The corresponding quintuple rule form also has great limitations. Therefore, for a full-featured WEB security gateway, it is necessary to redefine the form of the security access policy, and integrate...

AI Technical Summary

Problems solved by technology

Although the conflict rule detection algorithm based on policy segmentation, analysis and calculation, and conflict domain extraction improves the detection efficiency of conflict rules, if the level of rule items is too large, the grid space will grow infinitely, resulting in serious space waste. Practical application value, cannot be applied to WEB security gateway

[0004] There are not many direct algorithms for URL item rule conflict detection, but many existing URL deduplication algorithms and filtering algorithms can completely solve URL conflict detection, and there are many such papers, such as large-scale URL filtering methods in high-speed traffic environments. To solve the problem of conflict detection, it is necessary to limit the input form of the URL filtering algorithm and increase the size of the rule set, but this method will cause the problem of repeated application of nodes. When the number of URL rule layers increases, the number of nodes will increase sharply, and a large amount of memory space will be occupied and wasteful.

The detection accuracy of this algorithm is reduced, the processing time is too long, and there is room for improvement in both accuracy and speed.

Images