OPTWALL: A Hierarchical Traffic-Aware Firewall

Proceedings of the Symposium on Network and Distributed System Security, NDSS 2007

Volumn , Issue , 2007, Pages

  Acharya, Subrata ^a   Abliz, Mehmud ^a   Mills, Bryan ^a   Znati, Taieb F ^a,b   Wang, Jia ^c   Ge, Zihui ^c   Greenberg, Albert ^c  

^a Learning Research and Development Ctr   (United States)

^b UNIVERSITY OF PITTSBURGH   (United States)

^c AT AND T LABS RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER OPERATING SYSTEMS; COMPUTER SYSTEM FIREWALLS; COST REDUCTION; INTERNET SERVICE PROVIDERS; NETWORK SECURITY;

DESIGN ARCHITECTURE; HIERARCHICAL DESIGN; ON-LINE TRAFFIC; OPTIMIZATION FRAMEWORK; OVERALL EFFICIENCY; PERFORMANCE; RELIABILITY AND AVAILABILITY; SPLITTING TECHNIQUES; STRINGENTS; TRAFFIC AWARE;

DENIAL-OF-SERVICE ATTACK;

EID: 85180529579     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. T. V. Lakshman and D. Stidialis, “High speed policy-based packet forwarding using efficient multi-dimensional range matching,” in In Proceedings of SIGCOMM. ACM Press, 1998.
2. V. Srinivasan, S. Suri, and G. Varghese, “Packet classification using tuple space search,” in In Proceedings of SIGCOMM. ACM Press, 1999.
3. S. Acharya, J. Wang, Z. Ge, T. Znati, and A. Greenberg, “Traffic-aware firewall optimization strategies,” in IEEE International Conference on Communications, Istanbul, Turkey, June 2006.
4. P. Brucker, “On the complexity of clustering problems,” in in Optimization and Operations Research. Springer-Verlag, pp. 45-54, 1977, 1997.
5. S. Singh, F. Baboesu, G. Varghese, and J. Wang, “Packet classification using multidimensional cutting,” in SIGCOMM, 2003.
6. H. Hamed and E. Al-Shaer, “Dynamic rule-ordering optimization for high-speed firewall filtering,” in ASIACCS, 2006.
7. E. W. Fulp, “Optimization of network firewalls policies using directed acyclic graphs,” in Proceedings of the IEEE Internet Management Conference, 2005.
8. E. W. Fulp, “Parallel firewall designs for high-speed networks,” in INFOCOM, 2006.
9. L. Qiu, G. Varghese, and S. Suri, “Fast firewall implementations for software-based and hardware-based routers,” in SIGMETRICS’01: Proceedings of the 2001 ACM SIGMETRICS international conference on Measurement and modeling of computer systems. New York, NY, USA: ACM Press, 2001, pp. 344–345.
10. P. Gupta and N. McKeown, “Packet classification using hierarchical intelligent cuttings,” in in Proceedings of Hot Interconnects, 1999.
11. S. Singh, F. Baboesu, G. Varghese, and J. Wang, “Packet classification on multiple fields,” in SIGCOMM, 1999.
12. S. Singh, F. Baboesu, G. Varghese, and J. Wang, “Packet classification using multidimensional cutting,” in SIGCOMM, 2003.
13. P. Eronen and J. Zitting, “An expert system for analyzing firewall rules,” in Proceedings of the 6th Nordic Workshop on Secure IT Systems (NordSec 2001), Copenhagen, Denmark, Nov. 2001, pp. 100–107.
14. S. Hinrichs, “Integrating changes to a hierarchical policy model,” in Proceedings of 9th IFIP/IEEE International Symposium on Integrated Network Management. Nice, France: IEEE, 2005.
15. E. Al-Shaer and H. Hamed, “Modeling and management of firewall policies,” IEEE Trans. Network and Service Management, vol. 1, no. 1, Apr 2004.
16. S. J. Tarsa and E. W. Fulp, “Trie-based policy representations for network firewalls,” in Proceedings of the IEEE International Symposium on Computer Communications, 2006.
17. E. Al-Shaer and H. Hamed, “Modeling and management of firewall policies,” IEEE Trans. Network and Service Management, vol. 1, no. 1, Apr 2004.
18. J. Qian, S. Hinrichs, and K. Nahrstedt, “ACLA: A framework for access control list (acl) analysis and optimization,” in Communications and Multimedia Security, 2001.