Adaptive Conflict-Free Optimization of Rule Sets for Network Security Packet Filtering Devices
Joint Authors
Baiocchi, Andrea
Maiolini, Gianluca
Mingo, Annachiara
Goretti, Daniele
Source
Journal of Computer Networks and Communications
Issue
Vol. 2015, Issue 2015 (31 Dec. 2015), pp.1-17, 17 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2015-01-28
Country of Publication
Egypt
No. of Pages
17
Main Subjects
Information Technology and Computer Science
Abstract EN
Packet filtering and processing rules management in firewalls and security gateways has become commonplace in increasingly complex networks.
On one side there is a need to maintain the logic of high level policies, which requires administrators to implement and update a large amount of filtering rules while keeping them conflict-free, that is, avoiding security inconsistencies.
On the other side, traffic adaptive optimization of large rule lists is useful for general purpose computers used as filtering devices, without specific designed hardware, to face growing link speeds and to harden filtering devices against DoS and DDoS attacks.
Our work joins the two issues in an innovative way and defines a traffic adaptive algorithm to find conflict-free optimized rule sets, by relying on information gathered with traffic logs.
The proposed approach suits current technology architectures and exploits available features, like traffic log databases, to minimize the impact of ACO development on the packet filtering devices.
We demonstrate the benefit entailed by the proposed algorithm through measurements on a test bed made up of real-life, commercial packet filtering devices.
American Psychological Association (APA)
Baiocchi, Andrea& Maiolini, Gianluca& Mingo, Annachiara& Goretti, Daniele. 2015. Adaptive Conflict-Free Optimization of Rule Sets for Network Security Packet Filtering Devices. Journal of Computer Networks and Communications،Vol. 2015, no. 2015, pp.1-17.
https://search.emarefa.net/detail/BIM-1067747
Modern Language Association (MLA)
Baiocchi, Andrea…[et al.]. Adaptive Conflict-Free Optimization of Rule Sets for Network Security Packet Filtering Devices. Journal of Computer Networks and Communications No. 2015 (2015), pp.1-17.
https://search.emarefa.net/detail/BIM-1067747
American Medical Association (AMA)
Baiocchi, Andrea& Maiolini, Gianluca& Mingo, Annachiara& Goretti, Daniele. Adaptive Conflict-Free Optimization of Rule Sets for Network Security Packet Filtering Devices. Journal of Computer Networks and Communications. 2015. Vol. 2015, no. 2015, pp.1-17.
https://search.emarefa.net/detail/BIM-1067747
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1067747