Firewall security policy opening method and device based on simulation path analysis

Abstract

The embodiment of the invention discloses a firewall security policy opening method and device based on simulation path analysis. According to the method, quintuple information is obtained by obtaining policy opening application information, then path analysis is carried out in a network simulation environment according to the quintuple information, a path analysis result is obtained, and the network simulation environment is constructed according to connection and mutual access relations of all network devices in an existing network environment. A firewall which prevents access in the path analysis process is positioned as a target firewall according to the path analysis result, a target security policy corresponding to the type of the target firewall is generated according to the targetfirewall, and the target security policy is issued to the target firewall to complete policy opening. Through the method, the firewall for preventing access can be quickly positioned, so that the target security policy corresponding to the target firewall is generated, and the policy opening efficiency is improved.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a method and device for enabling a firewall security policy based on simulation path analysis. Background technique [0002] A firewall is a security barrier set between different networks or network security domains. The firewall mainly uses related security policies to check the access behaviors in and out of the network, so as to achieve the purpose of restricting certain access behaviors. At present, when using the security policy to check the access behavior, it is mainly to judge whether the five-tuple in the data flow passing through the firewall complies with the provisions of the security policy. If it meets the regulations, the data flow can be released to allow this kind of access behavior. Wherein, the five-tuple includes source address, destination address, source port number, destination port number and protocol type. [0003] When a certain acce...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem that it will take a lot of time to manually find firewall devices that block access, especially in the case of many firewall devices, the existing policy activation method is inefficient. This application discloses a simulation-based Method and device for enabling firewall security policy based on path analysis

Images