Filtering setting support device, filtering setting support method, and medium

摘要

In a filtering setting support device, a logical/physical mapping section generates mapping information that represents a path on the layout of a network by a combination of start nodes and end nodes, the path being, for each flow identifier, from a transmission source node to a destination node, based on node physical layout information and access policy information. The access policy information manages flow information including a combination of transmission source node and destination node, by attaching a flow identifier. A filtering point analysis section specifies as a filtering point a node where a plurality of flows are co-present. A common formal rule generating section generates common formal rules that are to be set at the filtering point. A common formal rule output section presents common formal rules to a network administrator.

主权项

1. A filtering setting support device, comprising:
an electronic computer device, which includes a processing unit and data storage having stored therein programming code readable by the processing unit, said processing unit, upon executing the programming code, causing the computer device to function as:
a logical/physical mapping unit which generates mapping information expressing a path on a configuration of a network from a transmission source node to a destination node for each flow identifier by using a combination of a start node and an end node, based on access policy information which manages flow information composed of a combination of the transmission source node and the destination node included in the network with attaching the flow identifiers and based on physical configuration information of the node included in the network,a filtering point analysis unit which specifies the node in which a plurality of flows are intermingled as a filtering point based on a number of arcs, which is extracted from the mapping information,a common format rule generation unit which generates a common format rule to be set to the filtering point from the flow information including the filtering point, anda common format rule output unit which presents the common format rule to an administrator of the network.