Cross-Domain Privacy-Preserving Cooperative Firewall Optimization

Chen, Fei; Bezawada, Bruhadeshwar; Liu, Alex X.

doi:10.1109/tnet.2012.2217985

Cited by 21 publications

(19 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The solution to firewall rule anomaly detection and resolution is not provided. Also, it is unable to provide solution for anomaly resolution [4]. M. G. Gouda and A. X. Liu, "Complete redundancy removal for packet classifiers in TCAMs," IEEE Transactions on Parallel Distributed System, Volume 21, No.…”

Section: Working Of Firewallmentioning

confidence: 99%

A Novel Technique for Effective Optimization of Cross Domain Network Protocol for Redundancy Removal in Firewall Policies

Unde¹,

Khiani²

2015

IJCA

View full text Add to dashboard Cite

In today's rapidly progressing professional world, internet is being used as a medium for almost every operation. Firewalls are extensively implemented to prevent unauthorized access to concealed networks and secure them. Based upon the applied policies a firewall can approve or decline the data packet by scrutinizing them. The large size and intricacy of modern networks result in big and complex firewall policies. Optimizing these policies is crucial for network performance inflation. Existing system facilitates inter-firewall or intrafirewall optimization within similar sets of administrative domains. They try to achieve optimization but at the cost of decreased network performance. In this paper, a protocol to increase the network performance while the cross domain firewall rules are optimized is explained. Rule optimization is achieved by redundant rule removal between the two firewalls. For boosting the performance and security, the data sent over the network will be encrypted and decrypted over a session key. Two types of rules i.e. network and user rules are supported. User can configure his own rules as per the required configuration in appropriate domain. Network rules will be common for both the domains and can be updated by the network administrator. The key technical experimentation is that firewall policies cannot be involved within similar domain areas because a firewall strategy contains exhaustive information and even potential security holes.

show abstract

Section: Working Of Firewallmentioning

confidence: 99%

A Novel Technique for Effective Optimization of Cross Domain Network Protocol for Redundancy Removal in Firewall Policies

Unde¹,

Khiani²

2015

IJCA

View full text Add to dashboard Cite

show abstract

“…In a cross-domain firewall rule optimization [11] rules of both the firewalls should be kept secure from each other. Security of the rules is important for two reasons: 1) Most of the firewalls are misconfigured and contain security holes which may be exploited by an attacker.…”

Section: Related Workmentioning

confidence: 99%

Improving Performance of CrossDomain Firewalls in MultiFirewall System

Sonali¹

2015

IJRITCC

View full text Add to dashboard Cite

Abstract-Firewall is used to protect local network from outside untrusted public network or Internet. Every packet coming to and going out from network is inspected at Firewall. Local network policies are converted into rules and stored in firewall. It is used to restrict access of the external network into local network and vice versa. Packets are checked against the rules serially. Therefore increase in the number of rules decreases the firewall performance. The key thing in performance improvement is to reduce number of firewall rules. Optimization helps to reduce number of rules by removing anomalies and redundancies in the rule list. It is observed that only reducing number of rules is not sufficient as the major time is consumed in rule verification. Therefore to reduce time of rule checking fast verification method is used. Prior work focuses on either Intrafirewall optimization or Interfirewall optimization within single administrative domain. In cross-domain firewall optimization key thing is to keep rules secure from others as they contain confidential information which can be exploited by attackers. The proposed system implements cross-domain firewall rule optimization. For optimization multi-firewall environment is considered. Then optimized rule set is converted to Binary Tree Firewall (BTF) so as to reduce packet checking time and improve firewall performance further.

show abstract

“…Prior work also shows that the Inter firewall redundancies removal [5], [6].In this techniques work focused on the redundancy removal in the two different administrative domain. When work has been done on the two different administrative domains the policy privacy should be concerned.…”

Section: Literature Surverrymentioning

confidence: 99%

“…Optimization of firewall is needed to increase the firewall performance. Various different techniques are used to optimize the firewall like optimization of rules [1], inter firewall optimization [5], [6], intra firewall optimization [2], [3], [4] etc. Intra firewall optimization works on single administrative domain so no need of privacy protection and inters firewall optimization works on two different administrative domains with privacy protection.…”

mentioning

confidence: 99%