A distributed firewall and active response architecture providing preemptive protection

Security and Privacy Implementation Framework as a Result of the Digitalization Process for Organizations in Different Industries

“…However, classical perimeter firewall deployments suffer from limitations due to complex network topologies and the inability to completely trust insiders of the network. Distributed firewalls are designed for alleviating these limitations [7].…”

Infrastructure as a service: Exploring network access control challenges

“…A source IP address and a destination IP address are basic information to generate a firewall rule. The firewall rules remain constant unless there is an explicit need to change the policy as a result the firewall cannot adapt to real-time threats [18]. Any system that uses predetermined and fixed IPs might impose some limitation on the dynamism and the scalability of IaaS [19].…”

“…The firewall virtualisation allows dynamic deployment, so it suits IaaS characteristics and it can effectively improve firewall configuration [59,61]. Most of the academic research assumes that the insiders in cloud service providers are not trusted [1,18,44]. To improve the trust in the cloud environment, a bridge virtual firewall can be designed and installed on the virtual machine in IaaS so that the cloud user can have full control on their firewall [44].…”

“…However, academic researchers recommend to take access control out of the network and place it in the hypervisor, basically into the host [9,18,75].…”

A Framework for Selecting the Minimal Set of Preferred Responses to Counter Detected Intrusions

“…Kheir et al (2009) minimal cost of responseThames et al (2008) firewallZhang et al (2003) logs the attack data for forensicsFigure 2.1 Code red attack is blocked successfully Figure 2.2 Code red attack succeeds Surveys such as Stakhanova et al (2007); Shameli-Sendi et al (2012); Anuar et al (2010)…”