A Survey On: Privacy Ensuring Optimization Protocol for Cross-Domain Firewalls to Improve the Network Performance
Autor: | Trupti V Inamdar, R. M. Goudar |
---|---|
Rok vydání: | 2014 |
Předmět: |
Bastion host
DMZ business.industry Computer science ComputerSystemsOrganization_COMPUTER-COMMUNICATIONNETWORKS Internet security Computer security computer.software_genre Context-based access control ComputingMilieux_MANAGEMENTOFCOMPUTINGANDINFORMATIONSYSTEMS Firewall (construction) Stateful firewall Reverse connection The Internet Application firewall business computer Administrative domain Private network |
Zdroj: | International Journal of Innovative Research in Computer and Communication Engineering. :7297-7300 |
ISSN: | 2320-9801 2320-9798 |
DOI: | 10.15680/ijircce.2014.0212040 |
Popis: | Firewalls have become the most essential part that is deployed on the Internet for protecting the private networks. Optimizing firewall rules is very critical for enhancing the performance of a network. The early work on firewall optimization focuses on either intra-firewall or inter-firewall optimization within one administrative domain where the privacy of firewall policies is not a concern. The main technical challenge to focused on is that firewall policies cannot be disclosed across domains because a firewall policy contains secret information and even potential security holes, which can be easily utilized by attackers. Proposed work involves first the protocol for preserving firewall policies and optimizing them. Particularly, for any two adjacent firewalls that belongs to two different administrative domains, this protocol can identify the rules in each firewall that can be removed because of the other firewall. This process of optimization involves computation between the two firewalls without any party disclosing their policies to the other. The communication cost is reduced by the optimization process. This protocol sustains no extra online packet processing overhead, and also the offline processing time is less. |
Databáze: | OpenAIRE |
Externí odkaz: |