A function-parallel architecture for high-speed firewalls

IEEE International Conference on Communications

Volumn 5, Issue , 2006, Pages 2213-2218

  Fulp, Errin W ^a   Farley, Ryan J ^a  

^a WAKE FOREST UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL COMPLEXITY; COMPUTER SYSTEM FIREWALLS; FUNCTION EVALUATION; PATTERN MATCHING;

HIGH-SPEED NETWORKS; SECURITY POLICY; TRAFFIC LOADS;

SOFTWARE ARCHITECTURE;

EID: 35348918585     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2006.255099     Document Type: Conference Paper

References (21)

1. S. M. Bellovin and W. Cheswick, "Network firewalls," IEEE Communications Magazine, pp. 50-57, Sept. 1994.
2. R. L. Ziegler, Linux Firewalls, 2nd ed. New Riders, 2002.
3. E. D. Zwicky, S. Cooper, and D. B. Chapman, Building Internet Firewalls. O'Reilly, 2000.
4. L. Qui, G. Varghese, and S. Suri, "Fast firewall implementations for software and hardware-based routers," in Proceedings of ACM SIGMET-RICS, June 2001.
5. S. Suri and G. Varghese, "Packet filtering in high speed networks," in Proceedings of the Symposium on Discrete Algorithms, 1999, pp. 969 -970.
6. C. Benecke, "A parallel packet screen for high speed networks," in Pro-ceedings of the 15th Annual Computer Security Applications Conference, 1999.
7. O. Paul and M. Laurent, "A full bandwidth ATM firewall," in Proceedings of the 6th European Symposium on Research in Computer Security ESORICS'2000, 2000.
8. U. Ellermann and C. Benecke, "Firewalls for ATM networks," in Proceedings of INFOSEC'COM, 1998.
9. R. Funke, A. Grote, and H.-U. Heiss, "Performance evaluation of firewalls in gigabit-networks," in Proceedings of the Symposium on Performance Evaluation of Computer and Telecommunication Systems, 1999.
10. S. Goddard, R. Kieckhafer, and Y. Zhang, "An unavailability analysis of firewall sandwich configurations," in Proceedings of the 6th IEEE Symposium on High Assurance Systems Engineering, 2001.
11. D. Eppstein and S. Muthukrishnan, "Internet packet filter management and Rectangle geometry," in Proceedings of the Symposium on Discrete Algorithms, 2001, pp. 827-835.
12. P. Warkhede, S. Suri, and G. Varghese, "Fast packet classification for Two-Dimensional Conflict-Free filters," in Proceedings of IEEE INFOCOM, 2001, pp. 1434-1443.
13. J. Xu and M. Singhal, "Design and evaluation of a High-Performance ATM firewall switch and its applications," IEEE Journal on Selected Areas in Communications, vol. 17, no. 6, pp. 1190-1200, June 1999.
14. X. Gan, T. Schroeder, S. Goddard, and B. Ramamurthy, "LSMAC vs. SLNAT: scalable cluster-based web servers," Journal of Networks, Software Tools, and Applications, vol. 3, no. 3, pp. 175-185, 2000.
15. V. P. Ranganath and D. Andresen, "A set-based approach to packet classification," in Proceedings of the IASTED International Conference on Parallel and Distributed Computing and Systems, 2003, pp. 889-894.
16. E. W. Fulp, "Optimization of network firewall policies using directed acyclical graphs," in Proceedings of the IEEE Internet Management Conference (IM'05), 2005.
17. E. W. Fulp and S. J. Tarsa, "Network firewall policy representation using ordered sets and tries," in Proceedings of the IEEE International Symposium on Computer Communications (ISCC'05), 2005.
18. D. E. Culler and J. P. Singh, Parallel Computer Architecture: A Hardware/Software Approach. Morgan Kaufman, 1999.
19. E. W. Fulp, "Firewall architectures for high speed networks," Wake Forest University Computer Science Department, Tech. Rep. 20026, 2002.
20. A. Wool, "A quantitative study of firewall configuration errors," IEEE Computer, vol. 37, no. 6, pp. 62 -67, June 2004.
21. W. E. Leland, M. S. Taqqu, W. Willinger, and D. V. Wilson, "On the self-similar nature of ethernet traffic," IEEE Transactions on Networking, vol. 2, pp. 1 - 15, 1994.