将静态代码分析应用于防火墙策略以进行异常检测
Applying static code analysis to firewall policies for the purpose of anomaly detection
摘要：
将现代防火墙策略语言视为命令式的专用程序设计语言，在本文中，我们将尝试应用静态代码分析技术来进行异常检测。本文首先将通用防火墙策略语言中的策略抽象成一种中间语言，然后尝试将异常检测算法应用到该中间语言中。流行的防火墙策略语言中各种控制流指令的分析2.介绍了一种中间防火墙策略语言，重点是控制流结构。3.应用\textit{Static Code Analysis}检测防火墙策略中的异常，以中间防火墙策略语言表示。4.防火墙策略的\textit{Static Code Analysis}的示例实现，使用Datasheet语言以我们的抽象语言表示。
英文摘要：
Treating modern firewall policy languages as imperative, special purpose programming languages, in this article we will try to apply static code analysis techniques for the purpose of anomaly detection. We will first abstract a policy in common firewall policy language into an intermediate language, and then we will try to apply anomaly detection algorithms to it. The contributions made by this work are: 1. An analysis of various control flow instructions in popular firewall policy languages 2. Introduction of an intermediate firewall policy language, with emphasis on control flow constructs. 3. Application of \textit{Static Code Analysis} to detect anomalies in firewall policy, expressed in intermediate firewall policy language. 4. Sample implementation of \textit{Static Code Analysis} of firewall policies, expressed in our abstract language using Datalog language.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
