You are here: silicon.com > Resources > White Papers > Security > Intrusion - Tampering > Firewalls

Firewalls White Papers

Firewall Compressor: An Algorithm for Minimizing Firewall Policies

Tags:
firewalls

Overview A firewall is a security guard placed between a private network and the outside Internet that monitors all incoming and outgoing packets. The function of a firewall is to examine every packet and decide whether to accept or discard it based upon the firewall's policy. This policy is specified as a sequence of (possibly conflicting) rules. With the explosive growth of Internet-based applications and malicious attacks, the number of rules in firewalls have been increasing rapidly, which consequently degrades network performance and throughput. This paper proposes Firewall Compressor, a framework that can significantly reduce the number of rules in a firewall while keeping the semantics of the firewall unchanged.

Further White Paper Details
Publisher	Michigan State University	File Format	PDF
Date Published	January 2008	Downloads	2
Format	White Papers
Topics	Firewalls, Network Security, Security Management

Did you find this white paper useful? 2 out of 5 users found this white paper useful

Wireless LANs wide open to 'drive-by' hackers

Tim Pickard, marketing director for RSA, said firms who had spent millions on top of the range IT security and firewalls were leaving the back door wide open: "This is easy pickings for anyone with malicious intent.

Channel:
Security Strategy

What's the fuss about... network infrastructure?

Look at network level security and you can nip port attacks and malicious hacking before it gets above the network layer. We guarantee that by implementing this solution, you will be well placed to accelerate from your competitors when the markets...

Channel:
Comment & Analysis

Browser-based attacks top security fears

Traditional firewalls examine traffic coming into the network, but guarding against browser attacks requires that traffic leaving the network also be inspected. One of the most common ways of disseminating these attacks is through emails that...

Channel:
Security Strategy

Quocirca's Straight Talking: Get smart about wireless security

In theory, any programmable device regardless of its size can be targeted with viruses and other sorts of malicious attacks. The concept of authenticating the integrity of the device as well as the user ID during connection has therefore emerged...

Veritas flaw enables corporate attacks

However, it fails to properly validate incoming packets, Veritas said in an advisory last week. Malicious code to exploit a vulnerability in Veritas Software's Backup Exec Remote Agent for Windows is publicly available, the US Computer Emergency...

Channel:
Security Strategy
Tags:
flaw,
veritas

Cracked: The Great Firewall of China

The Cambridge research group tested the firewall by firing data packets containing the word "Falun" at it, a reference to the banned Falun Gong religious group. If an attacker generated 100 triggering packets per second, and each packet caused 20...

Virtualisation: Architectual Considerations and other Evaluation Criteria

In the past several years, server virtualisation technology has moved quickly and firmly into the IT mainstream. Of the many approaches to system virtualisation available in the market today, VMware's hypervisor architecture has gained the greatest market acceptance. This paper examines the architectural issues, solution support, and enterprise readiness required when deploying such a virtualisation solution.

Publisher:
EMC

Getting Started with Master Data Management

Master data management forms part of an overall enterprise governance program that aims to establish trusted data throughout the enterprise. This white paper from Mike Ferguson of Intelligent Business Strategies defines master data, examines why it is needed, and explores methodologies for implementing master data management.

Publisher:
DataFlux

Optimising Storage with Global File Virtualisation

This white paper will provide an overview on how Rainfinity Global File Virtualisation virtualises unstructured data environments and moves data -including active, open files-without disruption to users or applications. Rainfinity is the only enterprise-class file virtualisation solution, and delivers complete NAS optimisation across geterogeneous environments, such as NAS, CAS, and file servers.

Publisher:
EMC

Also on silicon.com

Site Navigation:

Firewalls White Papers

Firewall Compressor: An Algorithm for Minimizing Firewall Policies

Quick Sitemap Links:

About Us

Search

Blogs

Verticals

Advertising Features

CNET Networks in Europe

CNET Networks in the United States

CNET Networks in Asia Pacific