Firewall Simulator Development for Performance Evaluation of Ranging a Filtration Rules Set

Botvinko, Anatoly Y.; Samouylov, Konstantin

doi:10.1007/978-3-031-23207-7_15

Cited by 2 publications

(4 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As the FW model we chose the previously developed one [2,3] that reflects the basic patterns and factors of the FW functioning when processing the network traffic. The traffic processing in this model includes two stages that are an initial processing stage and a stage of checking the packet filtration rules.…”

Section: Firewall Model With Ranging the Filtration Rulesmentioning

confidence: 99%

“…This is due to the fact that the search time for any rule corresponding to the data under filtration, is in proportion to the number of checked rules. And the filtering time for information flow that meets the conditions contained at the end of a large dimension set, will be much longer than the time required to filter data that meet the conditions contained at the beginning of the rule set [1,2].…”

Section: Introductionmentioning

confidence: 99%

“…In earlier works [1][2][3], the effectiveness of using methods for optimizing a filtration rule set was evaluated with the help of a simulation modeling method. To evaluate the effectiveness of methods for set optimization, the presented paper proposes an analytical solution, as well as an algorithm for calculating the probabilistic and temporal characteristics of the queuing system (QS) that formalizes the network traffic filtering process.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Evaluation of firewall performance metrics with ranging the rules for Poisson incoming packet flow and exponential filtering time

Botvinko,

Samouylov

2023

Discrete and Continuous Models

Self Cite

View full text Add to dashboard Cite

The given article is a continuation of a number of works devoted to the development of models and methods for ranging the filtration rules to prevent a decrease in the firewall performance caused by the use of a sequential scheme for checking packet compliance with the rules, as well as by the heterogeneity and variability of network traffic. The article includes a description of a firewall mathematical model given in the form of a complex system and a queuing system with a phase-type discipline for request servicing, which formalizes the network traffic filtering process with the functionality of ranging the rules. The purpose of modeling is to obtain estimates for major firewall performance metrics for various network traffic behavior scenarios, as well as to evaluate an increase in the firewall performance due to ranging a filtration rule set. Calculation of estimates for the firewall (FW) performance metrics was made using the analytical method for a Poisson request flow. Based on the analysis of the modeling results, conclusions were drawn on the effectiveness of ranging the filtration rules in order to improve the firewall performance for traffic scenarios that are close to real ones.

show abstract

Section: Firewall Model With Ranging the Filtration Rulesmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Evaluation of firewall performance metrics with ranging the rules for Poisson incoming packet flow and exponential filtering time

Botvinko,

Samouylov

2023

Discrete and Continuous Models

Self Cite

View full text Add to dashboard Cite

show abstract

“…In Ref. [61], a simulation model was presented for measuring the effectiveness of different filtering rules in a firewall. Different simulation model settings and network traffic behavior scenarios were used to assess the method's efficacy in establishing a filtering rule set.…”

Section: State Of the Artmentioning

confidence: 99%

An Information Security Engineering Framework for Modeling Packet Filtering Firewall Using Neutrosophic Petri Nets

Madhloom,

Noori,

Ebis

et al. 2023

Computers

View full text Add to dashboard Cite

Due to the Internet’s explosive growth, network security is now a major concern; as a result, tracking network traffic is essential for a variety of uses, including improving system efficiency, fixing bugs in the network, and keeping sensitive data secure. Firewalls are a crucial component of enterprise-wide security architectures because they protect individual networks from intrusion. The efficiency of a firewall can be negatively impacted by issues with its design, configuration, monitoring, and administration. Recent firewall security methods do not have the rigor to manage the vagueness that comes with filtering packets from the exterior. Knowledge representation and reasoning are two areas where fuzzy Petri nets (FPNs) receive extensive usage as a modeling tool. Despite their widespread success, FPNs’ limitations in the security engineering field stem from the fact that it is difficult to represent different kinds of uncertainty. This article details the construction of a novel packet-filtering firewall model that addresses the limitations of current FPN-based filtering methods. The primary contribution is to employ Simplified Neutrosophic Petri nets (SNPNs) as a tool for modeling discrete event systems in the area of firewall packet filtering that are characterized by imprecise knowledge. Because of SNPNs’ symbolic ability, the packet filtration model can be quickly and easily established, examined, enhanced, and maintained. Based on the idea that the ambiguity of a packet’s movement can be described by if–then fuzzy production rules realized by the truth-membership function, the indeterminacy-membership function, and the falsity-membership functional, we adopt the neutrosophic logic for modelling PN transition objects. In addition, we simulate the dynamic behavior of the tracking system in light of the ambiguity inherent in packet filtering by presenting a two-level filtering method to improve the ranking of the filtering rules list. Results from experiments on a local area network back up the efficacy of the proposed method and illustrate how it can increase the firewall’s susceptibility to threats posed by network traffic.

show abstract

Firewall Simulator Development for Performance Evaluation of Ranging a Filtration Rules Set

Cited by 2 publications

References 14 publications

Evaluation of firewall performance metrics with ranging the rules for Poisson incoming packet flow and exponential filtering time

Evaluation of firewall performance metrics with ranging the rules for Poisson incoming packet flow and exponential filtering time

An Information Security Engineering Framework for Modeling Packet Filtering Firewall Using Neutrosophic Petri Nets

Contact Info

Product

Resources

About