A Load-Balancing and State-Sharing Algorithm for Fault-Tolerant Firewall Cluster

Peng, Zhichao; Dai-wu, Chen; He, Wei

doi:10.1109/icisce.2017.17

Cited by 7 publications

(2 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…In [24] a similar architecture was proposed focusing on fault-tolerant implementation and algorithms for load distribution. Finally, in [25] a technique was described to distribute both rules and packets among parallel firewalls while maintaining the network security integrity.…”

Section: ) Parallel Architecturesmentioning

confidence: 99%

A Formal Model and Technique to Redistribute the Packet Filtering Load in Multiple Firewall Networks

Durante

Seno

Valenzano

2021

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

Section: ) Parallel Architecturesmentioning

confidence: 99%

A Formal Model and Technique to Redistribute the Packet Filtering Load in Multiple Firewall Networks

Durante

Seno

Valenzano

2021

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

“…Однако при высокой интенсивности потока трафика, например при DOS или DDOS атаке, Firewall может не справиться с нагрузкой. Авторами исследования [2] предложено решение на базе кластерного подхода, позволяющее осуществлять балансировку нагрузки между узлами при возрастании нагрузки на средства обеспечения безопасности. Однако авторы не затрагивают в своем исследовании вопросов репликации правил между узлами кластера.…”

Section: обзор исследованийunclassified

Development and Study of Algorithms for the Formation of Rules for Network Security Nodes in the Multi-Cloud Platform

Парфёнов

Bolodurina

Torchin

2019

Model. anal. inf. sist.

View full text Add to dashboard Cite

As part of the study, existing solutions aimed at ensuring the security of the network perimeter of the multi-cloud platform were considered. It is established that the most acute problem is the effective formation of rules on firewalls. Existing approaches do not allow optimizing the list of rules on nodes that control access to the network. The aim of the study is to increase the effectiveness of firewall tools by conflict-free optimization of security rules and the use of a neural network approach in software-defined networks. The proposed solution is based on the sharing of intelligent mathematical approaches and modern technologies of virtualization of network functions. In the course of experimental studies, a comparative analysis of the traditional means of rule formation, the neural network approach, and the genetic algorithm was carried out. It is recommended to use the multilayer perceptron neural network classifier for automatic construction of network security rules since it gives the best results in terms of performance. It is also recommended to reduce the size of the firewall security rule list using the Kohonen network, as this tool shows the best performance. A conflict-free optimization algorithm was introduced into the designed architecture, which produces finite optimization by ranking and deriving the most common exceptions from large restrictive rules, which allows increasing protection against attacks that are aimed at identifying security rules at the bottom of the firewall list. On the basis of the proposed solution, the adaptive firewall module was implemented as part of the research.

show abstract

Optimization of parallel firewalls filtering rules

Hadjadj

Bouhoula

Tebourbi

et al. 2021

Int. J. Inf. Secur.

View full text Add to dashboard Cite

A Load-Balancing and State-Sharing Algorithm for Fault-Tolerant Firewall Cluster

Cited by 7 publications

References 9 publications

A Formal Model and Technique to Redistribute the Packet Filtering Load in Multiple Firewall Networks

A Formal Model and Technique to Redistribute the Packet Filtering Load in Multiple Firewall Networks

Development and Study of Algorithms for the Formation of Rules for Network Security Nodes in the Multi-Cloud Platform

Optimization of parallel firewalls filtering rules

Contact Info

Product

Resources

About