Firewall packet matching optimization using network traffic behavior and packet matching statistics

Trabelsi, Zouheir; Sayed, Hishem El; Zeidan, Safaa

doi:10.1109/comnet.2012.6217735

Cited by 3 publications

(1 citation statement)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Our system invests this fact to enhance packet filtering performance by adopting level -2 fuzzy filtering to monitor rate of packets' acceptance or rejection to reorder ACL rules with the aim of minimizing the time of rule matching [26]. Here, the attempt is to model the uncertainty of the rate of acceptance or rejection of packets through a fuzzy model.…”

Section: Level 2-fuzzy Filteringmentioning

confidence: 99%

An Approach for Improving Performance of a Packet Filtering Firewall Based on Fuzzy Petri Net

Ali¹,

Darwish²,

Guirguis³

2015

JACN

View full text Add to dashboard Cite

Abstract-With the rapid development of Internet, the security of networks becomes an important issue today and monitoring network traffic is necessary for realizing different purposes such as system performance, network debugging and/or information security. As a major measure to implement enterprise security, firewall technique ensures the security of local networks. Traditional firewall technologies have their own weaknesses in architecture, configuration, monitoring and management that affect to firewall performance. Furthermore, it lacks to deal with vague and uncertainty associated with filtering packets from outside. Architecture of a new kind of firewall, intelligence firewall is presented in this paper. The main contribution is to utilize Fuzzy Petri Net as a tool for modeling discrete event systems characterized by an imprecise knowledge. The graphical power of Petri Nets makes the packet filtering model easy to design, test, improve and maintain. Another contribution is to present 2-level fuzzy filtering algorithm to enhance ordering of filtering rules list that permits us to model the dynamic behavior of monitoring system concerning uncertainty associated with packet filtering. Experimental results for local network are given, which show the effectiveness of the suggested approach and demonstrate the enhancement of the firewall sensitivity against the risk coming from network traffics.Index Terms-Firewall, fuzzy petri net, packet filtering, access control list (ACL).

show abstract

Section: Level 2-fuzzy Filteringmentioning

confidence: 99%