Security Tools White Papers
Adaptive Statistical Optimization Techniques for Firewall Packet Filtering
Overview Packet filtering plays a critical role in the performance of many network devices such as firewalls, IPSec gateways, DiffServ and QoS routers. A tremendous amount of research was proposed to optimize packet filters. However, most of the related works use deterministic techniques and do not exploit the traffic characteristics in their optimization schemes. In addition, most packet classifiers give no specific consideration for optimizing packet rejection, which is important for many filtering devices like firewalls. This paper presents a novel algorithm for maximizing early rejection of unwanted flows without impacting other flows significantly. It also presents a new packet filtering optimization technique that uses adaptive statistical search trees to utilize important traffic characteristics and minimize the average packet matching time.
| Publisher | DePaul University | File Format | |
|---|---|---|---|
| Date Published | December 2005 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSSBalancing Security Against Productivity
DownloadWhat makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
White Paper: Fw Monitor - A Troubleshooting Tool
fw monitor is a useful packet capture tool provided by Check Point as a part of VPN-1/FireWall-1. It allows a network troubleshooter to capture packets as they pass through the...
Improving IT Compliance: Guidance for Midsize Organizations
The results are in on the compliance efforts of companies boasting annual revenues of $50 to $999 million, and there's definitely room for improvement, especially at the middle and top...
