Conflict detection system and method based on classified access control list

Abstract

The invention discloses a conflict detection system based on a classified access control list, and a method based on the system comprises the following steps: collecting a network topology structure in real time, and modeling and storing the network topology structure; setting a critical path, collecting network equipment access control strategy information on the critical path in the network topology structure in real time, and analyzing the access control strategy information; classifying the analyzed access control strategy information to obtain an access control strategy information table which may have conflicts; and performing conflict detection on the access control strategy information table which may have conflicts to obtain a conflict detection result. According to the method, the access control list information of critical path related equipment in a management area specified by a user can be collected, the access control list information is analyzed and stored according to a specified structure, and conflict detection is carried out on an access control strategy.

Description

technical field [0001] The invention belongs to the field of network communication security, and in particular relates to a classification-based access control list conflict detection system and method. Background technique [0002] In the information age with the increasing development of network technology, the network has become an important part of people's life and work. As the scale of the network continues to expand, security issues such as illegal attacks, information leakage, and virus intrusion are prone to occur. Once these security issues occur, they may cause huge losses to us. Therefore, network security issues are becoming more and more important. Access control lists filter network traffic by controlling whether packets are forwarded or blocked on the router's interfaces. The router examines each packet and decides whether to forward or discard the packet based on the rules specified in the access list. Access control lists can provide a basic level of sec...

AI Technical Summary

Problems solved by technology

[0003]Facing the current complex network environment, network devices are interconnected, and it is meaningless to simply detect the conflict of the internal access control list of a single network device. Because the conflict of access control lists between devices will invalidate some access control rules, thus affecting the normal forwarding of packets

Images