'Optimizing the Interval Decision Diagram Implementation in the CF Firewall'

Studenteropgave: Speciale (inkl. HD afgangsprojekt)

  • Jesper Sloth Christensen
4. semester, Datalogi, Kandidat (Kandidatuddannelse)
'The purpose of this project is to reduce the time it takes to build a decision diagram from a set of firewall rules.

We improve the implementation of the CF firewall and are able to reduce the worst-case runtime for the functions that perform logical operations on decision digrams from exponential to polynomial. We also improve on other functions and for large rulesets we cut the time it takes to build the decision diagram from hours to seconds.

We also look at the order of variables in the decision diagram and examine what effect changing the order would have. We present an algorithm for finding a better order but discover that the order this gives does not reduce the size of the decision diagram. However, we also see that even if changing the order does not affect the size of the decision diagram, it can still influence the time it takes to build the decision diagram. '
Udgivelsesdatodec. 2005
ID: 61065520