Test Packets Choice Algorithm Aiming at Filter Conflicts

Xin Lu
2011-01-01
Computer Science
Abstract:Because of firewall filter conflicts,filters may not be in accordance with administrators' meaning so that this leads to security vulnerabilities.Therefore we need correctness test to solve this problem.Most of the current test packets choice algorithms choose packets at random or from the apex of filters in the correctness test.However these methods neglect the areas that contain conflicting filters and hence cannot detect all error produced by filter conflicts.This paper presented a test packets choice algorithm aiming at filter conflicts to address this problem.The algorithm treats two filters as the basic processed object and computes their area that contains conflicting filters.We not only choose test packets from the apex of filters but from the areas that contain conflicting filters as well.Compared to current test packets choice algorithms,the algorithm proposed by this paper can detect all error produced by filter conflicts with adding only a little packets.This paper proves the algorithm and experiments verify its good performance.
What problem does this paper attempt to address?