Traffic-aware firewall optimization strategies

IEEE International Conference on Communications

Volumn 5, Issue , 2006, Pages 2225-2230

  Acharya, Subrata ^a   Wang, Jia ^c   Ge, Zihui ^c   Znati, Taieb F ^a,b   Greenberg, Albert ^c  

^a University of Pittsburgh   (United States)

^b UNIVERSITY OF PITTSBURGH   (United States)

^c AT AND T LABS RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

KNOWLEDGE ENGINEERING; OPTIMIZATION; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

OPTIMIZATION FRAMEWORK; TRAFFIC BEHAVIOR;

COMPUTER SYSTEM FIREWALLS;

EID: 42549122173     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2006.255101     Document Type: Conference Paper

References (9)

1. T. V. Lakshman and D. Stidialis, "High speed policy-based packet forwarding using efficient multi-dimensional range matching," in In Proceedings of SIGCOMM. ACM Press, 1998.
2. V. Srinivasan, S. Suri, and G. Varghese, "Packet classification using tuple space search," in In Proceedings of SIGCOMM. ACM Press, 1999.
3. E. Al-Shaer and H. Hamed, "Modeling and management of firewall policies," IEEE Trans. Network and Service Management, vol. 1, no. 1, Apr 2004.
4. P. Eronen and J. Zitting, "An expert system for analyzing firewall rules," in Proceedings of the 6th Nordic Workshop on Secure IT Systems (NordSec 2001), Copenhagen, Denmark, Nov. 2001, pp. 100-107.
5. E. W. Fulp, "Optimization of network firewalls policies using directed acyclic graphs," in Proceedings of the IEEE Internet Management Conference, 2005.
6. J. Qian, S. Hinrichs, and K. Nahrstedt, "ACLA: A framework for access control list (acl) analysis and optimization," in Communications and Multimedia Security, 2001.
7. M. Condell and L. Sanchez, "On the Deterministic Enforcement of Unordered Security Policies," BBN Technical Memorandum No. 1346, April 26, 2004.
8. S. Acharya, J. Wang, Z. Ge, T. Znati, and A. Greenberg, "A TrafficAware Framework and Optimization Strategies for Large Scale Enterprise Networks," Technical Report, pp. 1-20, September 2005.
9. M. Roughan, A. Greenberg, C. Kalmanek, M. Rumsewicz, J. Yates, and Y. Zhang, "Experience in measuring backbone traffic variability: Models, metrics, measurements and meaning," in IMW '02: Proceedings of the 2nd ACM SIGCOMM Workshop on Internet Measurement. New York, NY, USA: ACM Press, 2002, pp. 91-92.