基于正则表达式的防火墙安全配置核查方法研究
Method of firewall configuration checking based on Regular Expression
-
摘要: 本文以铁路车站客票网防火墙为研究对象,提出了一种基于正则表达式的防火墙安全配置核查方法。此方法使用正则表达式匹配代替人工评判,提高了核查的效率;同时,该方法的安全配置基于信息安全国家标准要求和实际业务需求制定,降低了核查的主观性。Abstract: This paper proposed a method based on Regular Expression to check configurations through studying firewalls in TRS network of railway station. The method adopted Regular Expression matching instead of manual judging, made checking process more efficient. In addition, configuration checking lists were made based on national standards of information security and practical requirements of TRS network, which made checking process less subjective.