Evaluation of Data Center Network Security based on Next-Generation Firewall

Alhasan, Andi Jehan; Surantha, Nico

doi:10.14569/ijacsa.2021.0120958

Cited by 4 publications

(2 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The existing literature on Intrusion Detection and Prevention Systems (IDPS) is extensive and diverse, with each study providing valuable insights. Based on the comprehensive test results in this study [27], the utilization of pfSense and Suricata emerges as the proposed solution to thwart attacks initiated by internal users and curtail assaults stemming from internal networks, as evidenced by the conducted attack test scenarios. With supplementary devices, the next-generation firewall pfSense and Suricata can significantly bolster network security compared to relying solely on traditional firewalls.…”

Section: Introductionmentioning

confidence: 96%

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

Prabowo,

Fauziah,

Nahrowi

et al. 2023

IJACSA

View full text Add to dashboard Cite

This study aims to enhance network security by comprehensively evaluating various Intrusion Detection and Prevention Systems tools in networking systems. The objectives of this research were to assess the performance of different IDPS tools in terms of computer resources utilization, Quality of Service metrics namely delay, jitter, throughput, and packet loss, and their effectiveness in countering Distributed Denial of Service attacks, specifically ICMP Flood and SYN Flood. The evaluation used popular IDPS tools, including Snort, Suricata, Zeek, OSSEC, and Honeypot Cowrie. Real attack scenarios were simulated to measure the tools performance. The results indicated CPU and RAM usage variations among the tools, with Snort and Suricata showing efficient resource utilization. Regarding QoS metrics, Snort demonstrated superior performance in delay, jitter, throughput, and packet loss mitigation for both attack types. The implication for further research lies in exploring the optimal configurations and finetuning of IDPS tools to achieve the best possible network security against DDoS attacks. This research provides valuable insights into selecting appropriate IDPS tools for network administrators, cybersecurity professionals, and organizations to fortify their infrastructure against evolving cyber threats.

show abstract

Section: Introductionmentioning

confidence: 96%

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

Prabowo,

Fauziah,

Nahrowi

et al. 2023

IJACSA

View full text Add to dashboard Cite

show abstract

“…Virtual components like VNICs, virtual connections, and others will be used to facilitate this communication. Without the need of any hardware, these switches are referred to as virtual [7][8].…”

mentioning

confidence: 99%

Comparison Of Different Firewalls Performance In A Virtual For Cloud Data Center

Umm e Khadija,

Iqra Saqib

2023

JAC

View full text Add to dashboard Cite

Every data centre, whether virtual or physical, relies on its network, and the firewall is an essential part of that network for safe communication. Data centre connection can be protected by a variety of firewall types, including software firewalls, physical firewalls, virtual appliance firewalls, and kernel-integrated firewalls. There are several factors to consider when selecting a firewall, especially in a virtualized data centre, where each firewall works differently in different situations. Virtualized data centres are intended to yield lower budgets, efficient management extensibility, better utilization of available resources, scalability, and energy resilience, among several other advantages. Virtualized data centres are the topic of this study, which examines the application of firewalls. The performance of various types of firewalls, such as software firewalls, physical firewalls, virtual appliance firewalls, and kernel-integrated firewalls, is being analysed. Virtual data centre firewall implementation and performance comparisons explain how to design and which firewall type provides the best performance. In all conditions, it was shown that kernel-integrated firewalls worked properly. Virtual machine IP addresses and networks can vary, and the kernel-based firewall can dynamically update its rules to keep pace with such changes. With its distributed firewall functionality, virtual machines can travel across hypervisors with no disruption to their security settings, if their policies remain the same. A kernel-based, distributed firewall is the best way to protect against viruses.

show abstract

Toward a modern secure network based on next-generation firewalls: recommendations and best practices

Lamdakkar,

Ameur,

Eleyatt

et al. 2024

Procedia Computer Science

View full text Add to dashboard Cite

Evaluation of Data Center Network Security based on Next-Generation Firewall

Cited by 4 publications

References 14 publications

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

Comparison Of Different Firewalls Performance In A Virtual For Cloud Data Center

Toward a modern secure network based on next-generation firewalls: recommendations and best practices

Contact Info

Product

Resources

About