Development of distributed firewall system architecture

العناوين الأخرى

تطوير نظام الجدار الناري المنتشر

مقدم أطروحة جامعية

al-Naimi, Isra Ali Abd al-Razzaq

مشرف أطروحة جامعية

al-Shammari, Mahmud Karim

أعضاء اللجنة

al-Qarawi, Salih
Abd Allah, Muhammad N.
al-Mukhtar, Mumtaz

الجامعة

الجامعة التكنولوجية

الكلية

-

القسم الأكاديمي

قسم هندسة الحاسوب

دولة الجامعة

العراق

الدرجة العلمية

دكتوراه

تاريخ الدرجة العلمية

2007

الملخص الإنجليزي

With single-firewall architecture, firewalls often form the first, and most times the only, line of defense against attack.

Such architecture is practical for a small network, but it fails in large and enterprise networks.

Some of problems faced by single-firewall architecture are insider threats, bandwidth bottleneak, and low-trust level.

This brings in the need for the distributed firewall architecture, wherein security can be provided at different levels in the network (add extra layers of defense).

This aim is achieved by dividing the complete network into smaller parts namely subnets and securing each of which with its own firewall.

That leads to increase the performance of the firewall.

This thesis presents the first step towards such architecture - distributed firewall architecture for large network as the solution for some problems about issues related to network security. The proposed software was developed using Microsoft Visual Basic 6.0 programming language.

The implementation of the proposed system uses the packet filtering mechanism as a technical method to filter the IP packets and the Dual-Homed host as an architecture in which firewall components are managed to provide effective protection against unauthorized users.

In this thesis the distributed firewall model implemented by distribute the localized firewalls in three positions in the protected network to add extra levels for protection and to reduce the number of rules in the border firewall, thereby the load on the Border Firewall is also reduce. Hence architecture provides higher trust level, high performance and mitigates the Bandwidth bottleneck, defense in depth, all that resulting in secure network.

التخصصات الرئيسية

تكنولوجيا المعلومات وعلم الحاسوب

عدد الصفحات

108

قائمة المحتويات

• APA
• MLA
• AMA

لغة النص

الإنجليزية

نوع البيانات

رسائل جامعية

رقم السجل

BIM-748858