Preventing Denial of Service Attacks in Government E-Services Using a New Efficient Packet Filtering Technique

Alhabeeb, Mohammed; Le, Phu Dung; Srinivasan, Bala

doi:10.1109/ispa.2011.54

Cited by 2 publications

(2 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It works in the network layer and considers the common core component of any network monitoring tool, which processes every packet header and passes those packets according to filter's rules present in the access control list [3]. In this type of firewall there is no concern of applications, therefore focus is on the individual packets [7]. The information used for classifying packets is usually contained in distinct header fields in the packet, which are protocol field, source IP, source port, destination IP, destination port, TCP flags, Internet Control Message Protocol (ICMP) type and ICMP code [5].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

An Approach for Improving Performance of a Packet Filtering Firewall Based on Fuzzy Petri Net

Ali¹,

Darwish²,

Guirguis³

2015

JACN

View full text Add to dashboard Cite

Abstract-With the rapid development of Internet, the security of networks becomes an important issue today and monitoring network traffic is necessary for realizing different purposes such as system performance, network debugging and/or information security. As a major measure to implement enterprise security, firewall technique ensures the security of local networks. Traditional firewall technologies have their own weaknesses in architecture, configuration, monitoring and management that affect to firewall performance. Furthermore, it lacks to deal with vague and uncertainty associated with filtering packets from outside. Architecture of a new kind of firewall, intelligence firewall is presented in this paper. The main contribution is to utilize Fuzzy Petri Net as a tool for modeling discrete event systems characterized by an imprecise knowledge. The graphical power of Petri Nets makes the packet filtering model easy to design, test, improve and maintain. Another contribution is to present 2-level fuzzy filtering algorithm to enhance ordering of filtering rules list that permits us to model the dynamic behavior of monitoring system concerning uncertainty associated with packet filtering. Experimental results for local network are given, which show the effectiveness of the suggested approach and demonstrate the enhancement of the firewall sensitivity against the risk coming from network traffics.Index Terms-Firewall, fuzzy petri net, packet filtering, access control list (ACL).

show abstract

Section: Introductionmentioning

confidence: 99%

“…Other firewall techniques require that clients and/or servers be specially configured to work with the firewall. In general, packet filtering technologies are fast, inexpensive compared to the other technologies and development cost is very less [7]. Most routers include built-in packet filtering.…”

Section: Introductionmentioning

confidence: 99%