A Full Bandwidth ATM Firewall

Paul, Olivier; Laurent, Maryline; Gombault, Sylvain

doi:10.1007/10722599_13

Cited by 15 publications

(16 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…If no rule applies, the default policy of the chain does. ^ This increase is not always a real drawback since the use of a parsing algorithm independent of the number of rules is the best solution for the deployment of firewall technologies [14]. Let us now consider the same rules specified in the syntax of NetFilter.…”

Section: Partial Ordering Of Rulesmentioning

confidence: 99%

Management of Exceptions on Access Control Policies

Alfaro

Cuppens

Cuppens-Boulahia

2007

New Approaches for Security, Privacy and Trust in Complex Environments

View full text Add to dashboard Cite

Abstract. The use of languages based on positive or negative expressiveness is very common for the deployment of security policies (i.e., deployment of permissions and prohibitions on firewalls through singlehanded positive or negative condition attributes). Although these languages may allow us to specify any policy, the single use of positive or negative statements alone leads to complex configurations when excluding some specific cases of general rules that should always apply. In this paper we survey such a management and study existing solutions, such as ordering of rules and segmentation of condition attributes, in order to settle this lack of expressiveness. We then point out to the necessity of full expressiveness for combining both negative and positive conditions on firewall languages in order to improve this management of exceptions on access control policies. This strategy offers us a more efficient deployment of policies, even using fewer rules.

show abstract

Section: Partial Ordering Of Rulesmentioning

confidence: 99%

Management of Exceptions on Access Control Policies

Alfaro

Cuppens

Cuppens-Boulahia

2007

New Approaches for Security, Privacy and Trust in Complex Environments

View full text Add to dashboard Cite

show abstract

“…Security applications are also considered [10]. Another application of this kind of platform could be admission control facilities that would be based upon "on the fly" identification of elastic and streaming flows [11].…”

Section: Future Workmentioning

confidence: 99%

High Router Flexibility and Performance by Combining Dedicated Lookup Hardware (IFT), off the Shelf Switches and Linux

Duret

Rischette

Lattmann

et al. 2002

NETWORKING 2002: Networking Technologies, Services, and Protocols; Performance of Computer and Communication Networks; Mobile A

View full text Add to dashboard Cite

Abstract. In this paper we propose a new router architecture that combines both flexibility and performance. This router architecture aims at combining the best of two worlds: the commercial routers, which have a proven track for stability and performance but lack the flexibility of routers with open source operation system. The latter is particularly flexible because the source code is accessible for analysis and modification purposes as opposed to the traditional commercial routers, whose software can be altered by their manufacturers only. Motivation and State-of-the-ArtThe exponential growth of Internet traffic has yielded a dramatic development effort of the IP routers technology. Moreover, the deployment of value-added IP service offerings (ranging from a QoS-based access to the Internet to real-time services, like IP videoconferencing) has lead to an important development of specific capabilities (traffic conditioning, marking, scheduling and metering) that are supported by someif not all -the routers of the Internet. The consequence of the activation of such enhanced capabilities is twofold: a demand for an increase of the routers' switching performances together with the availability of multi-functional and multi-service routers.Other important concerns deal with IP security, multicast, and Virtual Private Networks services. Therefore, the IP routers that are exploited in a multi-service environment need to be flexible enough in order to address current and future requirements.For the past decade, Linux has received considerable interest not only from the research community, but also from the industry. An extensive description of Linux features and related bibliography can be found in [1]. Recently, an implementation for DiffServ over MPLS [2] has been released by some of the authors of this paper.

show abstract

“…Furthermore, it is well known that the computing power of hosts, the transmission speeds of packets and the complexity of networks, continue to increase. To keep abreast with these increasingly-demanding environments, firewalls must be able to "proportionately" adapt to changes by processing packets at increasingly higher speeds [6,7]. Thus, it is desirable that a firewall monitoring system processes a lesser number of packet matches in order to reduce the potentially exorbitant filtering overhead as well as the overall packet matching time [4].…”

Section: Introductionmentioning

confidence: 99%

Dynamic Ordering of Firewall Rules Using a Novel Swapping Window-based Paradigm

Mohan

Yazidi

Feng

et al. 2016

Proceedings of the 6th International Conference on Communication and Network Security

View full text Add to dashboard Cite

Designing and implementing efficient firewall strategies in the age of the Internet of Things (IoT) is far from trivial. This is because, as time proceeds, an increasing number of devices will be connected, accessed and controlled on the Internet.Additionally, an ever-increasingly amount of sensitive information will be stored on various networks. A good and efficient firewall strategy will attempt to secure this information, and to also manage the large amount of inevitable network traffic that these devices create. The goal of this paper is to propose a framework for designing optimized firewalls for the IoT. Further, by performing a rigorous suite of experiments, we demonstrate that both algorithms are capable of optimizing the constraints imposed for obtaining an efficient firewall.

show abstract

A Full Bandwidth ATM Firewall

Cited by 15 publications

References 3 publications

Management of Exceptions on Access Control Policies

Management of Exceptions on Access Control Policies

High Router Flexibility and Performance by Combining Dedicated Lookup Hardware (IFT), off the Shelf Switches and Linux

Dynamic Ordering of Firewall Rules Using a Novel Swapping Window-based Paradigm

Contact Info

Product

Resources

About