Using online traffic statistical matching for optimizing packet filtering performance

Proceedings - IEEE INFOCOM

Volumn , Issue , 2007, Pages 866-874

  El Atawy, Adel ^a   Samak, Taghrid ^a   Al Shaer, Ehab ^a   Hong, Li ^b  

^a DEPAUL UNIVERSITY   (United States)

^b INTEL CORPORATION   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION (OF INFORMATION); DATA STRUCTURES; OPTIMIZATION; SIGNAL FILTERING AND PREDICTION; STATISTICAL METHODS; TELECOMMUNICATION TRAFFIC;

HUFFMAN TREES; LIGHTWEIGHT PACKET CLASSIFICATION; MOST-RECENTLY-USED (MRU) LIST; STATISTICAL MATCHING;

PACKET NETWORKS;

EID: 34548314604     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2007.106     Document Type: Conference Paper

References (23)

1. J. Abrahams. Parallelized huffman and hu-tucker searching. IEEE Transactions on Information Theory, 40(2):508-, 1994.
2. E. Al-Shaer and H. Hamed. Discovery of policy anomalies in distributed firewalls. In IEEE INFOCOM'04, March 2004.
3. F. Baboescu and G. Varghese. Scalable packet classification. In ACM SIGCOMM'01, 2001.
4. D. Baron and A. Singer. On the cost of worst case coding length constraints. IEEE Trans. Inf. Theory, 47(7):3088-3090, 2001.
5. E. Cohen and C. Lund. Packet classification in large isps: design and evaluation of decision tree classifiers. In SIGMETRICS '05: Proceedings of the 2005 ACM SIGMETRICS international conference on Measurement and modeling of computer systems, pages 73-84, New York, NY, USA, 2005. ACM Press.
6. T. M. Cover and J. A. Thomas. Elements of Information Theory. John Wiley & sons, 1991.
7. A. L. Edwards. An Introduction to Linear Regression and Correlation. W. H. Freeman and Co, San Francisco, 1993.
8. A. El-Atawy, K. Ibrahim, H. Hamed, and E. Al-Shaer. Policy segmentation for intelligent firewall testing. In NPSec, November 2005.
9. A. Feldmann and S. Muthukrishnan. Tradeoffs for packet classification. In IEEE INFOCOM'00, March 2000.
10. P. Gupta and N. McKeown. Algorithms for packet classification. IEEE Network, 15(2):24-32, 2001.
11. P. Gupta and N. McKeown. Packet classification using hierarchical intelligent cuttings. In Interconnects VII, August 1999.
12. P. Gupta, B. Prabhakar, and S. Boyd. Near optimal routing lookups with bounded worst case performance. In IEEE INFOCOM'00, 2000.
13. H. Hamed and E. Al-Shaer. Dynamic rule ordering optimization for high-speed firewall filtering. In ASIACCS'06, 2006.
14. H. Hamed, A. El-Atawy, and E. Al-Shaer. Adaptive statistical optimization techniques for firewall packet filtering. In IEEE INFOCOM'06, April 2006.
15. L. Kencl and C. Schwarzer. Traffic-adaptive packet filtering of denial of service attacks. In WOWMOM'06: The 2006 International Symposium on on World of Wireless, Mobile and Multimedia Networks, pages 485-489, Washington, DC, USA, 2006. IEEE Computer Society.
16. K. Lan and J. Heidemann. On the correlation of internet flow characteristics. Technical Report ISI-TR-574, USC/ISI, 2003.
17. L. L. Larmore and D. S. Hirschberg. A fast algorithm for optimal length-limited huffman codes. J. ACM, 37(3):464-473, 1990.
18. A. J. McAulay and P. Francis. Fast routing table lookup using CAMs. In IEEE INFOCOM'93, March 1993.
19. Passive Measurement and Analysis Project, National Laboratory for Applied Network Research. Auckland-VIII Traces. http://pma.nlanr.net/Special/auck8. html, December 2003.
20. V. Srinivasan, Subhash Suri, and George Varghese. Packet classification using tuple space search. In Computer ACM SIGCOMM Communication Review, pages 135-146, October 1999.
21. D. Taylor and J. Turner. Scalable packet classification using distributed crossproducting of field values. In IEEE INFOCOM'05, 2005.
22. Thomas Y. C. Woo. A modular approach to packet classification: Algorithms and results. In IEEE INFOCOM'00, pages 1213-1222, March 2000.
23. A. Wool. A quantitative study of firewall configuration errors. IEEE Computer, 37(6):62-67, 2004.