A Quad-Trie Conditionally Merged with a Decision Tree for Packet Classification

Lim, Hyesook; Choe, Young-Ju; Shim, Miran; Lee, Jungwon

doi:10.1109/lcomm.2014.013114.132384

Cited by 11 publications

(1 citation statement)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It leads to a decision tree data structure that can be optimised to yield good search complexity even in very big rule lists (in the order of 100000 rules). A heuristic approach is explored in [20], by looking for a compromise between memory efficient trie data structures and search efficient decision trees. Detection of specific packets is considered in [21], where a randomised algorithm is considered: the emphasis here is placed on isolating specifically targeted packets from the mass of the wire traffic.…”

Section: Related Workmentioning

confidence: 99%

Adaptive Conflict-Free Optimization of Rule Sets for Network Security Packet Filtering Devices

Baiocchi

Maiolini²,

Mingo³

et al. 2015

Journal of Computer Networks and Communications

View full text Add to dashboard Cite

Packet filtering and processing rules management in firewalls and security gateways has become commonplace in increasingly complex networks. On one side there is a need to maintain the logic of high level policies, which requires administrators to implement and update a large amount of filtering rules while keeping them conflict-free, that is, avoiding security inconsistencies. On the other side, traffic adaptive optimization of large rule lists is useful for general purpose computers used as filtering devices, without specific designed hardware, to face growing link speeds and to harden filtering devices against DoS and DDoS attacks. Our work joins the two issues in an innovative way and defines a traffic adaptive algorithm to find conflict-free optimized rule sets, by relying on information gathered with traffic logs. The proposed approach suits current technology architectures and exploits available features, like traffic log databases, to minimize the impact of ACO development on the packet filtering devices. We demonstrate the benefit entailed by the proposed algorithm through measurements on a test bed made up of real-life, commercial packet filtering devices.

show abstract

Section: Related Workmentioning

confidence: 99%