SYSTEM AND METHOD FOR FILTERING MULTI-OPERATION RULE SET AND COMPUTER PROGRAM

摘要

PURPOSE: A multi-operation rule set filtering system and method is provided to test a plurality of filter rules in a computer system for enhancing an easy and speedy test of different behaviour types of filter rules. CONSTITUTION: The method comprises steps of determining a part of filter rules matched by keys(102) and clearly testing each key matching the filter rules(104). In the step(102), the filter rules are narrowed as many as possible to match the key. An arbitrary bit of the key is tested with respect to a corresponding bit of the filter rule. According to a test result, other bit of the key is tested with respect to a corresponding bit of the filter rule, and the bit test process is repeated for determining if the key matches the selected part of the filter rule. The test bits are determined based on the number of binary symbols, the number of wild cards and the number of boundary symbols occurring at a specific bit describing the filter rules. The number of the filter rules to match the key in the step(104) can be reduced so it can reduce a time in testing keys of a specific packet.