A new approach to designing firewall based on multidimensional matrix

Cheng, Yuzhu; Wang, Weiping; Min, Geyong; Wang, Jianxin

doi:10.1002/cpe.3178

Cited by 9 publications

(29 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This will also reduce the maximum delay in the sequential rules evaluation by the firewalls. Another optimization criterion is to ensure the rules are conflict-free based on the following two points [2] : First, because of the conflicts among rules and the resulting order sensitivity, firewall rules are logically entangled, and the correct ordering is critical but difficult. The semantics of any rule in a firewall cannot be correctly understood without examining previously listed rules.…”

Section: Introductionmentioning

confidence: 99%

“…In Ref. [2], Cheng et al presented an approach for designing firewalls based on a multidimensional matrix. In their proposed method, a Firewall Design Matrix (FDM) is first designed.…”

Section: Introductionmentioning

confidence: 99%

“…Figure 1 illustrates an example of this instance. Assuming there are three firewall rules r 1 : F 1 2 [1,2] [4,7] ! accept, as shown in Fig.…”

Section: Introductionmentioning

confidence: 99%

“…accept, as shown in Fig. 1a, since these rules have the same decision, and are allowed to overlap, they can be further compressed to two rules: [4,7] !accept, and r 2 : [2,8] !accept, as shown in Fig. 1b.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

FPC: A new approach to firewall policies compression

Cheng

Wang

et al. 2019

Tinshhua Sci. Technol.

Self Cite

View full text Add to dashboard Cite

Firewalls are crucial elements that enhance network security by examining the field values of every packet and deciding whether to accept or discard a packet according to the firewall policies. With the development of networks, the number of rules in firewalls has rapidly increased, consequently degrading network performance. In addition, because most real-life firewalls have been plagued with policy conflicts, malicious traffics can be allowed or legitimate traffics can be blocked. Moreover, because of the complexity of the firewall policies, it is very important to reduce the number of rules in a firewall while keeping the rule semantics unchanged and the target firewall rules conflict-free. In this study, we make three major contributions. First, we present a new approach in which a geometric model, multidimensional rectilinear polygon, is constructed for the firewall rules compression problem. Second, we propose a new scheme, Firewall Policies Compression (FPC), to compress the multidimensional firewall rules based on this geometric model. Third, we conducted extensive experiments to evaluate the performance of the proposed method. The experimental results demonstrate that the FPC method outperforms the existing approaches, in terms of compression ratio and efficiency while maintaining conflict-free firewall rules.

show abstract

Section: Introductionmentioning

confidence: 99%

“…In Ref. [2], Cheng et al presented an approach for designing firewalls based on a multidimensional matrix. In their proposed method, a Firewall Design Matrix (FDM) is first designed.…”

Section: Introductionmentioning

confidence: 99%

“…Figure 1 illustrates an example of this instance. Assuming there are three firewall rules r 1 : F 1 2 [1,2] [4,7] ! accept, as shown in Fig.…”

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

FPC: A new approach to firewall policies compression

Cheng

Wang

et al. 2019

Tinshhua Sci. Technol.

Self Cite

View full text Add to dashboard Cite

show abstract

“…To protect the networks, firewalls are crucial elements to enhance network security by examining the field value of every packet and decide whether to accept or discard the packet according to the firewall policy. The paper entitled A New Approach to Designing Firewall Based on Multidimensional Matrixİ aims to develop an effective firewall design method to ensure the consistency, compactness and completeness of firewall rules . As a result, firewall design matrix and the corresponding construction algorithm for mapping firewall rules to firewall design matrix have been given.…”

mentioning

confidence: 99%

Frontier technologies of trust computing and network security

Xiang

Al-Dubi

Liu

et al. 2015

Concurrency and Computation

View full text Add to dashboard Cite

EDITORIAL Frontier technologies of trust computing and network securityThe increasing complexity of computer systems and communication networks induces tremendous requirements for trust and security. This special issue includes topics on trusted computing, risk and reputation management, network security and survivable computer systems/networks. These issues have evolved into an active and important area of research and development. The past decade has witnessed a proliferation of concurrency and computation systems for practice of highly trust, security and privacy, which has become a key subject in determining future research and development activities in many academic and industrial branches. This special issue aims to present and discuss advances of current research and development in all aspects of trusted computing and network security. In addition, this special issue provides snapshots of contemporary academia work in the field of network trusted computing. We prepared and organized this special issue to record state-of-theart research, novel development and trends for future insight in this domain. In this special issue, 14 papers have been accepted for publication, which demonstrate novel and original work in this field. A detailed overview of the selected works is given below.

show abstract