{"id":233051,"updated":"2025-01-19T10:13:50.431738+00:00","links":{},"created":"2025-01-19T01:34:16.178839+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00233051","sets":["1164:4088:11480:11520"]},"path":["11520"],"owner":"44499","recid":"233051","title":["冗長化されたファイアウォールにおける効率的な設定同期の自動化の一検討"],"pubdate":{"attribute_name":"公開日","attribute_value":"2024-03-05"},"_buckets":{"deposit":"ed2caed4-8a6a-4c18-a4fe-e323615a3d6d"},"_deposit":{"id":"233051","pid":{"type":"depid","value":"233051","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"冗長化されたファイアウォールにおける効率的な設定同期の自動化の一検討","author_link":["632120","632119"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"冗長化されたファイアウォールにおける効率的な設定同期の自動化の一検討"},{"subitem_title":"On Automation of Efficient Configuration Synchronization in Redundant Firewalls","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"IOT-D","subitem_subject_scheme":"Other"}]},"item_type_id":"4","publish_date":"2024-03-05","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"鳥取大学情報戦略機構"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Organization for Information Strategy and Management, Tottori University","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/233051/files/IPSJ-IOT24064031.pdf","label":"IPSJ-IOT24064031.pdf"},"date":[{"dateType":"Available","dateValue":"2026-03-05"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-IOT24064031.pdf","filesize":[{"value":"246.7 kB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"43"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"5f212d05-2901-4f98-97f7-d91ab7d50f96","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2024 by the Information Processing Society of Japan"}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"大森, 幹之"}],"nameIdentifiers":[{}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Motoyuki, Ohmori","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA12326962","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8787","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"ネットワークの可用性を向上するため，ファイアウォールを冗長化することがある．冗長化されたファイアウォール間では，セキュリティポリシや NAT/NAPT ポリシといった設定を同期する必要がある．そこで，本稿では，冗長化されたファイアウォール間でセキュリティポリシの設定を同期する手法とその自動化を提案する．設定同期にあたっては，予備機に設定を投入することで，現用機のセキュリティポリシに合わせることを考える．ここでは，1 つのセキュリティポリシを 1 つのシンボルとみなし，セキュリティポリシ全体をシンボルからなる系列データとして扱う．そして，最短編集手順 (SES: Shortest Edit Script) 問題に帰着させ，予備機の系列データを最短の編集手順で現用機の系列データに変換する最小編集手順を求める．また，設定の投入を自動化することを考え，異なるメーカのファイアウォール間でのセキュリティポリシの同期についても考察する．","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"To improve network availability, firewalls may be made redundant. Among multiple redundant firewalls, it is necessary to synchronize configurations such as security policy and NAT/NAPT policy. In this paper, we propose a method to synchronize firewall configurations of security policy and its automation. We then consider to configure the backup firewall in order to synchronize its security policy with one of main firewall. We here regard security policy as a symbol, and treat the entire security policy as a sequence of symbols. We then attribute the synchronization problem to an SES (Shortest Edit Script) problem, and try to solve it. We also consider automation of the synchronization of security policies between firewalls, and discuss the syncrhonization between firewalls of even different manufacturers.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"6","bibliographic_titles":[{"bibliographic_title":"研究報告インターネットと運用技術（IOT）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2024-03-05","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"31","bibliographicVolumeNumber":"2024-IOT-64"}]},"relation_version_is_last":true,"weko_creator_id":"44499"}}