First step toward cloud-based firewalling

Proceedings of the IEEE Symposium on Reliable Distributed Systems

Volumn , Issue , 2012, Pages 41-50

  Khakpour, Amir R ^a   Liu, Alex X ^a  

^a Michigan State University   (United States)

Author keywords

Cloud Computing; Firewall

Indexed keywords

ANONYMIZATION; BLOOM FILTERS; CLOUD-BASED; DECISION DIAGRAM; EXPLOSIVE GROWTH; FIREWALL; FIREWALL POLICIES; HARD PROBLEMS; LOOKUP TIME; MEMORY USAGE; MULTIDIMENSIONALITY; NETWORK-BASED SERVICES; OUTSOURCE; PACKET FILTERING; PRIVACY PRESERVING; PRIVATE NETWORKS; SERVICE OUTSOURCING; SOFTWARE FIREWALLS;

CLOUD COMPUTING; INTERNET SERVICE PROVIDERS; OUTSOURCING;

COMPUTER SYSTEM FIREWALLS;

EID: 84874291709     PISSN: 10609857     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SRDS.2012.31     Document Type: Conference Paper

References (23)

1. T. Ritter, "Network-based firewall: Extending the firewall into the cloud," http://www.business.att.com/content/whitepaper/ NemertesDN0496Network-BasedFirewallServicesMay2009.pdf, 2009.
2. "AT&T-Network-Based Firewall," http://www.business.att.com/ enterprise/Service/business-continuity-enterprise/ebfirewallsecurity/ networkbased-firewall-enterprise/.
3. R. Richardson, "CSI/FBI computer crime and security survey," 2008.
4. M. Whitworth, "Outsourced security the benefits and risks," Network Security, pp. 16-19, 2005.
5. "Strategies for outsourcing security measures," http://www.cisco.com/en/US/netsol/ns546/netvalueproposition09186a0080145ad7. html, 2002.
6. J. Grady, "The little guy fights back: Outsourcing firewall management makes economic sense for smaller companies-service providers," Telecommunications. (http://findarticles.com/p/articles/mi m0TLC/is136/ ai83150961/), 2002.
7. "Survey: 88% of ICT Employees Would Steal," http://www.scoop.co.nz/stories/BU0811/S00203.htm, 2008.
8. R. B. McAfee and P. J. Champagne, Effectively managing troublesome employees. Quorum Books, 1994.
9. M. G. Gouda and A. X. Liu, "Structured firewall design," Computer Networks Journal (Elsevier), vol. 51, no. 4, pp. 1106-1120, March 2007.
10. B. Bloom, "Space/time trade-offs in hash coding with allowable errors," Communications of ACM, vol. 13, no. 7, pp. 422-426, 1970. [Online]. Available: citeseer.nj.nec.com/article/chandranmenon95trading.html
11. J. Cheng, H. Yang, S. H. Wong, and S. Lu, "Design and implementation of cross-domain cooperative firewall," in Proc. IEEE Int. Conf. on Network Protocols (ICNP), 2007.
12. A. X. Liu and F. Chen, "Collaborative enforcement of firewall policies in virtual private networks," in Proc. PODC, 2008.
13. D. A. Maltz, J. Zhan, G. Xie, H. Zhang, G. Hjálmtýsson, A. Greenberg, and J. Rexford, "Structure preserving anonymization of router configuration data," in Proc. IMC, 2004.
14. M. Harvan and J. Schönwälder, "Prefix-and lexicographical-orderpreserving ip address anonymization," in 10th IEEE/IFIP Network Operations and Management Symposium (NOMS), 2006.
15. R. Ramaswamy and T. Wolf, "High-speed prefix-preserving ip address anonymization for passive measurement systems," IEEE/ACM Transaction in Networking, vol. 15, pp. 26-39, 2007.
16. R. Pang, M. Allman, V. Paxson, and J. Lee, "The devil and packet trace anonymization," in Proc. ACM SIGCOMM, 2006.
17. A. X. Liu and M. G. Gouda, "Diverse firewall design," in Proc. Int. Conf. on Dependable Systems and Networks (DSN-04), June 2004, pp. 595-604.
18. A. X. Liu, C. R. Meiners, and E. Torng, "TCAM razor: A systematic approach towards minimizing packet classifiers in TCAMs," IEEE/ACM Transactions on Networking, to appear.
19. D. Salomon, Data Compression: The Complete Reference. Springer, 2006.
20. A. S. K. Wu, E.J. Otoo, "An efficient compression scheme for bitmap indices," Research Report, Lawrence Berkeley National Laboratory, 2004.
21. G. Antoshenkov, "Byte-aligned bitmap compression," Data Compression Conference, 1995.
22. D. E. Taylor, "Survey & taxonomy of packet classification techniques," ACM Computing Surveys, vol. 37, no. 3, pp. 238-275, 2005.
23. "Umass Trace Repository, http://traces.cs.umass.edu/."