Review of various firewall deployment models

Nurika, Okta; Aminz, Anang Hudaya B Muhamad; Rahman, Abdullah Sani Bin Abd.; Zakaria, Mohamed

doi:10.1109/iccisci.2012.6297140

Cited by 6 publications

(9 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This method gives the capability of auto-generation of rules for packets that do not match with any rule by the use of a rule-based expert system that employs the previously defined rules in deducing new rules [21]. A short summary of the existing literature on packet filtering can be found in [3]. Despite of the variety of existing packet filtering techniques, we believe that there are still many paths to be explored in the field of intelligence firewalls.…”

Section: Literature Surveymentioning

confidence: 99%

“…Firewall have many abilities like defines a single choke point that keeps unauthorized users out of the protected network, prohibits potentially vulnerable services from entering or leaving the network, provides a location for monitoring security-related events, audits and alerts action also can be implemented by firewall system [3]. Furthermore, it can serve as the platform for IP security, and can be used to implement virtual private networks.…”

Section: Introductionmentioning

confidence: 99%

“…Generally the continuous growth of the Internet, coupled with the increasing sophistication of attacks is placing further demands and complexity on firewalls design and management. A firewall type varies and ranges from a packet filtering and circuit-level to a proxy service [3]. Proxies or application-level firewalls are CPU intensive and considered to be the most secure type of firewalls, but they incur a significant performance penalty.…”

Section: Introductionmentioning

confidence: 99%

“…It works in the network layer and considers the common core component of any network monitoring tool, which processes every packet header and passes those packets according to filter's rules present in the access control list [3]. In this type of firewall there is no concern of applications, therefore focus is on the individual packets [7].…”

Section: Introductionmentioning

confidence: 99%

“…A weakness of packet filtering is that it Ali A. Ali, Saad M. Darwish, and Shawkat K. Guirguis An Approach for Improving Performance of a Packet Filtering Firewall Based on Fuzzy Petri Net pretty much trusts that the packets themselves are telling the truth when they say who they're from and who they're going to. Another weakness of packet filtering is that it examines each packet in isolation without considering what packets have gone through the firewall before and what packets may follow, in other words, although network traffic contains huge of events and lot of useful information, most of the current packets filtering techniques exploit the characteristics of filtering rules but they do not consider the traffic behavior in their optimization schemes [3], [8]. This is the main problem of this paper and our proposal suggests a solution to cope with this weakness point.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

An Approach for Improving Performance of a Packet Filtering Firewall Based on Fuzzy Petri Net

Ali¹,

Darwish²,

Guirguis³

2015

JACN

View full text Add to dashboard Cite

Abstract-With the rapid development of Internet, the security of networks becomes an important issue today and monitoring network traffic is necessary for realizing different purposes such as system performance, network debugging and/or information security. As a major measure to implement enterprise security, firewall technique ensures the security of local networks. Traditional firewall technologies have their own weaknesses in architecture, configuration, monitoring and management that affect to firewall performance. Furthermore, it lacks to deal with vague and uncertainty associated with filtering packets from outside. Architecture of a new kind of firewall, intelligence firewall is presented in this paper. The main contribution is to utilize Fuzzy Petri Net as a tool for modeling discrete event systems characterized by an imprecise knowledge. The graphical power of Petri Nets makes the packet filtering model easy to design, test, improve and maintain. Another contribution is to present 2-level fuzzy filtering algorithm to enhance ordering of filtering rules list that permits us to model the dynamic behavior of monitoring system concerning uncertainty associated with packet filtering. Experimental results for local network are given, which show the effectiveness of the suggested approach and demonstrate the enhancement of the firewall sensitivity against the risk coming from network traffics.Index Terms-Firewall, fuzzy petri net, packet filtering, access control list (ACL).

show abstract

Section: Literature Surveymentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

An Approach for Improving Performance of a Packet Filtering Firewall Based on Fuzzy Petri Net

Ali¹,

Darwish²,

Guirguis³

2015

JACN

View full text Add to dashboard Cite

show abstract

A dynamic firewall architecture based on multi-source analysis

Navarikuth

Neelakantan

Sachan

et al. 2013

CSIT

View full text Add to dashboard Cite

Firewall forms the first layer of defense mechanism with respect to perimeter security in which organizational security policies are implemented as rules. Incoming and outgoing packets are screened to prevent violations against firewall rules. There are two fundamental issues that we observe in the present day firewall. Firstly, present day firewall is not intelligent enough to be aware of the breaches and attacks happening over the network. Second issue is that the formulated rules are not permanent and needs frequent firewall rule updates which are carried out manually. Also, present day attacks are more sophisticated and dynamic in nature. Hence, static nature of the present day firewall do not provide adequate protection to the dynamic network needs. In this paper, we present a comprehensive approach, whereby we carry out analysis from multiple sources to generate dynamic firewall rules. Uniqueness of our approach are-in aggregating multiple inputs such as intrusion detection system alerts, SNMP events and flow records,-devising individual analyzers based on statistical techniques such as K-S test and entropy based for generating dynamic firewall rules. To validate our approach, we carried out attack and accuracy analysis over network test environment. The results show that our approach is effective in generating new firewall rules especially for scan and flood type of attacks. Keywords Reactive firewall Á Dynamic firewall Á Self-configuration Á Active firewall Á Automatic firewall rule-formulation Á Adaptive firewall Á Firewall analyzers Á Anomaly detection 1.1 Present day firewalls challenges Present day firewalls are configured manually and the rules/policies stay static until new policies are enacted.

show abstract