Method and apparatus for optimizing a firewall

Details Method and apparatus for optimizing a firewall Method and apparatus for optimizing a firewall

2011-06-21

2011-06-21

Dinh, Minh (Department: 2432)

Information security

Access control or authentication

Network

Reexamination Certificate

active

07966655

ABSTRACT:
Disclosed is a method and system for optimizing a first set of rules enforced by a firewall on network traffic. Characteristics of the network traffic are examined and these characteristics are used to generate a second set of rules. The first set of rules may have a different order than the second set of rules.

REFERENCES:
patent: 6154775 (2000-11-01), Coss et al.
patent: 6253321 (2001-06-01), Nikander et al.
patent: 6854063 (2005-02-01), Qu et al.
patent: 7061874 (2006-06-01), Merugu et al.
patent: 2002/0107953 (2002-08-01), Ontiveros et al.
patent: 2002/0133586 (2002-09-01), Shanklin et al.
patent: 2003/0051165 (2003-03-01), Krishnan et al.
patent: 2004/0205360 (2004-10-01), Norton et al.
patent: 2006/0248580 (2006-11-01), Fulp et al.
Archarya, S., et al., “Simulation Study of Firewalls to Aid Improved Performance”, Proc. 39th Annual Sim. Symp., 2006.
Archarya, S., et al., “Traffic-Aware Firewall Optimization Strategies”, Proc. IEEE Int'l. Conf. Comm., 2006.
Hamed, H., et al., “Dynamic Rule-ordering Optimization for High-speed Firewall Filtering”, ASIACCA, 2006.
PCT International Search Report corresponding to PCT Patent Application PCT/US2007/014392 filed Jun. 19, 2007.
PCT Written Opinion of the International Searching Authority corresponding to PCT Patent Application PCT/US 2007/014392 filed Jun. 19, 2007.
Roughan, M. et al., “Experience in Measuring Backbone Traffic Variability: Models, Metrics, Measurements and Meaning”, Proc. of the 2nd Association for Computing Machinery (ACM), Special Interest Group on Data Communication (SIGCOMM) Workshop on Internet Measurement, pp. 91-92, France, 2002.
Al-Shaer, E.,et al., “Modeling and Management of Firewall Policies”, IEEE Trans. on Network and System Management, vol. 1, No. 1, pp. 1-10, 2004.
Eronen, P. et al., “An Expert System for Analyzing Firewall Rules”, Proc. of the 6th Nordic Workshop on Secure IT Systems (NordSec 2001), pp. 100-107, Denmark, 2001.
Qian, J. et al., “ACLA: A Framework for Access Control List (ACL) Analysis and Optimization”, Proc. of Communications and Multimedia Security, pp. 1-15, 2001.

Affiliated with

Also associated with

Rating

Method and apparatus for optimizing a firewall does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method and apparatus for optimizing a firewall, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for optimizing a firewall will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2708758