Firewalls White Papers
Traffic Analysis: From Stateful Firewall to Network Intrusion Detection System
Overview Computer network is already an indispensable part of the modern life. To keep the network run smoothly, conditions are needed to know. This calls for the necessity of analyzing the traffic (packets) on the network. This paper investigates traffic analysis techniques need in stateful firewall and Network Intrusion Detection System (NIDS). Stateful firewall analyzes packets up to their layer 4 headers while NIDS analyzes the whole packet. The key techniques for stateful firewall and NIDS are flow state management and string matching. This paper investigates the design of flow state management and several major string matching algorithms. This paper also suggests some improvement over TCP state management and TCP flow normalization.
| Publisher | Stony Brook University | File Format | |
|---|---|---|---|
| Date Published | January 2004 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 1 out of 2 users found this white paper useful
White Paper RSSBalancing Security Against Productivity
DownloadWhat makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Automated Solution Overhauls Tumbleweed Communications’ Software Updating Process
Download this case study from Macrovision to read about Tumbleweed Communications’ success using Macrovision’s FLEXnet Publisher Update Service Module, a Web-based service that proactively delivers software patches, updates, and other...
HP OpenView Operations OVO Firewall Configuration White Paper
This document describes how to setup and configure OVO in a firewall environment. It describes what steps need to be performed on the OVO management server and on the firewall...
