摘　　要 i
Abstract ii
目錄 . iii
圖目錄 v
第一章 緒論 1
第二章 文獻探討 7
2.1 Set Covering Problem 7
2.2 Al-shaer研究探討 8
2.3 Yi-Yin 研究探討 11
2.4 Chi-Shih Chao研究探討 14
2.4.1 ARAR研究探討 14
2.4.2 防火牆規則異常優化系統 16
2.5 高效率防火牆狀態規則異常診斷機制 20
2.5.1 Enhanced-ARAR樹的建構 20
第三章 防火牆規則優化 27
3.1 計算各規則面積與Enhanced-ARAR樹節點面積 27
3.2 刪除不匹配規則 29
3.3 基因演算法 31
3.3.1 基因編碼 33
3.3.2 基因演算法-選擇或複製 34
第四章 功能實做 39
4.1 開發環境 39
4.2 系統介面 40
4.2.1 初始系統圖形視窗 40
4.2.2 防火牆管理介面 41
第五章 實驗分析 44
5.1 演算法介紹 44
5.2 演算法分析比較 50
第六章 結論與未來發展 52
第七章 參考文獻 53

[1].C.H. Liao, C.S. Chao, “An ARAR Tree-Based Diagnosis System for Rule Anomalies Optimization System,” Feng Chia University Department of Communications Engineering, Feng Chia University,2016.
[2].D. Rovniagin, A. Wool, “The geometric efficient matching algorithm for firewalls,” IEEE Transactions on Dependable and Secure Computing, Vol. 8, Is. 1, pp. 147-159, 2011.
[3].Ehab Al-Shaer, Hazem Hamed, “Modeling and Management of Firewall Policies,” IEEE Transactions on Network and Service Management, Vol: 1-1,2004.
[4].E. Al-Shaer, H. Hamed, R.Boutaba and M. Hasan,“Conflict Classification and Analysis of Distributed Firewall Policies,” IEEE Journal on Selected Areas in Communications, Vol. 23, Is. 10, pp. 2069-2084,2005.
[5].E. Horowitz, S. Sahni and S. Anderson-Freed, “Fundamentals of data structures in C, ” 2nd ed. Summit, NJ: Silicon Press,2008.
[6].Holland, John H., “Adaptation in Natural and Artificial Systems,” the MIT Press, Cambridge,1992.
[7].H.Y. Lin, C.S. Chao, “An Efficient Anomaly Diagnostic Mechanism for Stateful Firewall Rules,” Feng Chia University Department of Communications Engineering, Feng Chia University,2018.
[8].Subana Thanasegaran, Yi Yin, Yuichiro Tateiwa, Yoshiaki Katayama and Naohisa Takahashi, “Topological Approach to Detect Conflicts in Firewall Policies, ” International Workshop on Security in Systems and Networks, Proc. of 23rd IEEE International Parallel and Distributed Processing Symposium, SSN-1569173665- paper-3.pdf,2009.
[9].Yi Yin, R. S. Bhuvaneswaran, Yoshiaki Katayama, and Naohisa Takahashi, “Implementation of Packet Filter Configurations Anomaly Detection System with SIERRA,” ICICS 2005, LNCS3783, Beijing, pp. 467–480.
[10].Yi Yin, Yoshiaki Katayama and Naohisa Takahashi, “Detection of Conflicts Caused by a Combinations of Filters Based on Spatial Relationships,” IPSJ Journal, Sep 2008, Vol.49, pp. 3121-3135.