You are here: silicon.com > Resources > White Papers > Security > Intrusion - Tampering > Firewalls

Firewalls White Papers

Traffic-Aware Firewall Optimization Strategies

Tags:
firewalls

Overview The overall performance of a firewall is crucial in enforcing and administrating security, especially when the network is under attack. The continuous growth of the Internet, coupled with the increasing sophistication of the attacks, is placing stringent demands on firewall performance. This paper describes a traffic-aware optimization framework to improve the operational cost of firewalls. Based on this framework, a set of tools are designed that inspect and analyze both multidimensional firewall rules and traffic logs and construct the optimal equivalent firewall rules based on the observed traffic characteristics. To the best of the knowledge, this work is the first to use traffic characteristics in firewall optimization.

Further White Paper Details
Publisher	University of Pittsburgh	File Format	PDF
Date Published	March 2006
Format	White Papers
Topics	Firewalls, Network Security, Security Tools

Did you find this white paper useful? 3 out of 6 users found this white paper useful

Balancing Security Against Productivity

What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...

Publisher:
Novell

Security: New strides in preventing intrusions.

Need help eliminating risk in your IT environment? This ForwardView webshow describes how security appliances, which incorporate an array of security functions, can help you ward off security breaches without...

Publisher:
IBM

IntelÂ® CentrinoÂ® 2 with vProÂ™ Technology and IntelÂ® CoreÂ™2 Processor with vProÂ™ Technology

This whitepaper explores how the latest notebook and desktop PCs with Intel® vPro™ technology build on proven capabilities to enable greater proactive security, enhanced maintenance, and improved remote management both...

Publisher:
Intel

PCI DSS Compliance in the UNIX/Linux Datacenter Environment

This document explains how BeyondTrust PowerBroker supports the Payment Card Industry Data Security Standard (PCI DSS) by limiting and tracking authorization to execute commands and programs that access servers and...

Publisher:
BeyondTrust

Tags:
application security tools

IOS Tips and Tricks

There are a number of things you can do with Cisco's IOS to make your life easier. This white paper presents some ways that IOS commands can help streamline your...

Publisher:
Global Knowledge

Tags:
tcp - ip

Peter Cochrane's Uncommon Sense: Net Antibodies

If the last attack could stop trains running, foul up traffic control systems, stop banks trading and cripple small businesses, watch out. I ensure protection by installing firewalls on individual machines and while I am in some respects open to...

Channel:
Storage

Blaster dodges responsibility for US blackout

However, the working group decided not to analyze the logs of network devices, firewalls and intrusion detection systems, which could have given further evidence of any network attacks that coincided with the outage.

Channel:
IT Pro

Browser-based attacks top security fears

Traditional firewalls examine traffic coming into the network, but guarding against browser attacks requires that traffic leaving the network also be inspected. Because the attacks usually aren't launched until the user clicks on the link, many...

Channel:
Security Strategy

The biggest VoIP security threats - and how to stop them

The attack is generated by machines that have been compromised by a virus or other malware and the massive increase in traffic means the affected servers are unable to process any valid requests and the whole system grinds to a halt.

Gambling site brought to its knees by 'unstoppable' botnet

More worrying, during a second attack the botnet blocked attempts by the websites to stop them using a port firewall while continuing sending out data to carry on the attack. Peter Bassill, information security officer with Gala Coral ecommerce...

Internet blacklisting tool unveiled

DShield is a community-based system that collaborates firewall logs from contributors in order to analyse attack trends, and is used as the data-collection system behind the Sans Institute's Internet Storm Center.

Channel:
WebWatch
Tags:
google

Featured White Papers

The Value of Location Intelligence in the Communications Industry

Public Services are under pressure, the challenge is to do more with less. How do you improve citizen satisfaction, increase cost efficiencies and improve service delivery? The power of location intelligence is helping many local authorities and government departments make more informed decisions and derive greater value from current location-based information and data. Read this whitepaper to see how you can take advantage of location intelligence.

Publisher:
Pitney Bowes

Best Practices for Translating Customer Satisfaction into Revenue

Today's support organisations are focused on two top-level metrics: financial results and customer satisfaction. For most, it's easy to track financial performance, but customer satisfaction is akin to speaking a foreign language. How do you quantify customer satisfaction? Download the Best Practices for Benchmarking Customer Satisfaction to get industry research the Association of Support Professionals (ASP) on how to measure and leverage customer satisfaction.

Publisher:
Citrix Online

HP print solutions and 3M

the objective for 3M was to optimize office printing infrastructure at 3Mlocations worldwide Reduce total cost and environmental footprint. Some of the business benefits acheived by switching to HP print soultions, More than $3 million in savings in first two years and Per page costs reduced by up to 90 percent.