| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To provide a rule information change method, a management device and a program, allowing reduction of a collation frequency between a query and rule information as thoroughly as possible when deciding whether or not rule information of a firewall device fits a security policy. <P>SOLUTION: First, a combination DRL(j) of a pair of rule elements RL(j, k) having dependency relation of the rule information RL(j) is detected. The following steps are repeated in each query element Q(i) of the query Q. The repeated steps include steps of: detecting a fit rule element MR fitting the query element Q(i) in turn from a topmost rule element RL(j, k) (k=1-n) in the rule information RL(j); detecting one or more dependency rule elements DR having dependency relation with the fit rule element MR; and moving them to the topmost position without changing relative order between MR and DR. <P>COPYRIGHT: (C)2011,JPO&INPIT</p> |
