CAJ | 학술논문

防火墙是业务系统的第一道防线，对保证内网安全起着关键作用，而防火墙策略配置粗粒度使得防火墙作用难以真正发挥。目前，人工策略审核费时费力，亟需一种自动化的策略审计手段。本文研究并实现了关于防火墙策略的自动化审计系统，该系统能有助于促进防火墙策略配置规范化，提升安全水平的同时提高工作效率，辅助管理员加固网络的第一道防线。
방화장시업무계통적제일도방선，대보증내망안전기착관건작용，이방화장책략배치조립도사득방화장작용난이진정발휘。목전，인공책략심핵비시비력，극수일충자동화적책략심계수단。본문연구병실현료관우방화장책략적자동화심계계통，해계통능유조우촉진방화장책략배치규범화，제승안전수평적동시제고공작효솔，보조관리원가고망락적제일도방선。
Firewall is the first line of defense for business systems, and it plays a key role in the security of intranet, but careless configuration makes it difficult to work. Nowadays, policy audit mostly depends on manual work, and it is a time-consuming effort, we need a way to check the configuration of the firewall policyautomatically. We have researched and real?ized a system for the automatic audit,which can help to raise the standardizationfor the firewall configuration, and improve the level of security and increase the efficiency of audit, and help the administrators to strengthening the intranet.