An Architecture for Self-adaptive Distributed Firewall

Abstract

The notion of secure perimeter given by border firewalls ignores the possibility of attacks originating from inside the network. Although distributed firewalls allow the protection of individual hosts, the provided services might still be susceptible to attacks, as firewalls usually do not analyze application protocols. In this way, software vulnerabilities may be exploited until the problem has been fixed. From vulnerability discovery to the application of patches there is an exposure window that should be reduced. In this context, this paper presents an architecture for a distributed firewall system, in which a Vulnerability Assessment System is integrated for providing a self-adaptive mechanism capable of detecting vulnerabilities and executing actions to reduce exposure, contributing to mitigate the risk of vulnerability exploitation.

Automating cloud virtual machines allocation via machine learning

“…The studies in [3], [4] examined the effects of distributed firewalls. Although previous studies have explored the impact of the added a new improvements and functionalities to traditional firewalls.…”

“…Consequently, traditional firewalls implemented at the network boundary are no longer efficient in this context. Instead, centralized firewalls, positioned between the internal network of an establishment and the internet, are replaced by distributed firewalls [4]. These distributed firewalls define security policies using a specific language in a centralized manner, to be implemented at various points within the network.…”