The Experts below are selected from a list of 13653 Experts worldwide ranked by ideXlab platform

Anirudhan Sudarsan - One of the best experts on this subject based on the ideXlab platform.

  • Improving Firewall Performance by Eliminating Redundancies In Access Control Lists
    Computer Science Journals, 2014
    Co-Authors: Ajay Krishna Vasu, Ashwin Ganesh, Priya Ayyappan, Anirudhan Sudarsan
    Abstract:

    A firewall is a Network Security Device that works to protect an organization's internal Network from both unauthorized and malicious users. It functions by examining all packets that enter any one of its incoming interfaces and comparing the structure of the packet against a set of predefined rules. Each rule specifies if a packet corresponding to the rule is to be permitted or denied. This set of rules is called an access control list (ACL) and it forms the basis of a firewall's policy. Incorrect configuration of the firewall can lead to redundant rules which cause performance degradation. We propose an algorithm to identify and eliminate redundant rules in an access control list during the configuration phase. The proposed work defines an access control list as a linked list data structure. A comparison of the proposed work and the conventional approach is also presented.\u

  • Improving Firewall Performance by Eliminating Redundancies
    2014
    Co-Authors: Ajay Krishna Vasu, Ashwin Ganesh, Anirudhan Sudarsan
    Abstract:

    A firewall is a Network Security Device that works to protect an organization's internal Network from both unauthorized and malicious users. It functions by examining all packets that enter any one of its incoming interfaces and comparing the structure of the packet against a set of predefined rules. Each rule specifies if a packet corresponding to the rule is to be permitted or denied. This set of rules is called an access control list (ACL) and it forms the basis of a firewall's policy. Incorrect configuration of the firewall can lead to redundant rules which cause performance degradation. We propose an algorithm to identify and eliminate redundant rules in an access control list during the configuration phase. The proposed work defines an access control list as a linked list data structure. A comparison of the proposed work and the conventional approach is also presented

Ajay Krishna Vasu - One of the best experts on this subject based on the ideXlab platform.

  • Improving Firewall Performance by Eliminating Redundancies In Access Control Lists
    Computer Science Journals, 2014
    Co-Authors: Ajay Krishna Vasu, Ashwin Ganesh, Priya Ayyappan, Anirudhan Sudarsan
    Abstract:

    A firewall is a Network Security Device that works to protect an organization's internal Network from both unauthorized and malicious users. It functions by examining all packets that enter any one of its incoming interfaces and comparing the structure of the packet against a set of predefined rules. Each rule specifies if a packet corresponding to the rule is to be permitted or denied. This set of rules is called an access control list (ACL) and it forms the basis of a firewall's policy. Incorrect configuration of the firewall can lead to redundant rules which cause performance degradation. We propose an algorithm to identify and eliminate redundant rules in an access control list during the configuration phase. The proposed work defines an access control list as a linked list data structure. A comparison of the proposed work and the conventional approach is also presented.\u

  • Improving Firewall Performance by Eliminating Redundancies
    2014
    Co-Authors: Ajay Krishna Vasu, Ashwin Ganesh, Anirudhan Sudarsan
    Abstract:

    A firewall is a Network Security Device that works to protect an organization's internal Network from both unauthorized and malicious users. It functions by examining all packets that enter any one of its incoming interfaces and comparing the structure of the packet against a set of predefined rules. Each rule specifies if a packet corresponding to the rule is to be permitted or denied. This set of rules is called an access control list (ACL) and it forms the basis of a firewall's policy. Incorrect configuration of the firewall can lead to redundant rules which cause performance degradation. We propose an algorithm to identify and eliminate redundant rules in an access control list during the configuration phase. The proposed work defines an access control list as a linked list data structure. A comparison of the proposed work and the conventional approach is also presented

Kleopa Constantinos - One of the best experts on this subject based on the ideXlab platform.

  • context sharing between endpoint Device and Network Security Device using in band communications
    2017
    Co-Authors: Shankar Hari, Kleopa Constantinos
    Abstract:

    A Network Security Device (NSD) is connected between a Network and an endpoint Device configured to host a client application. The client application communicates with the Network through the Network Security Device using a request-response protocol. The NSD receives from the client application a request destined for the Network and that seeks a response from the Network. The request has a context header including context information about the client application. The NSD determines whether the client application or a file accessed thereby has a suspicious nature based on the context information. If it is determined that the client application or the file accessed thereby has a suspicious nature, the NSD blocks the request from the Network, and sends to the client application a response indicating the block.

Ashwin Ganesh - One of the best experts on this subject based on the ideXlab platform.

  • Improving Firewall Performance by Eliminating Redundancies In Access Control Lists
    Computer Science Journals, 2014
    Co-Authors: Ajay Krishna Vasu, Ashwin Ganesh, Priya Ayyappan, Anirudhan Sudarsan
    Abstract:

    A firewall is a Network Security Device that works to protect an organization's internal Network from both unauthorized and malicious users. It functions by examining all packets that enter any one of its incoming interfaces and comparing the structure of the packet against a set of predefined rules. Each rule specifies if a packet corresponding to the rule is to be permitted or denied. This set of rules is called an access control list (ACL) and it forms the basis of a firewall's policy. Incorrect configuration of the firewall can lead to redundant rules which cause performance degradation. We propose an algorithm to identify and eliminate redundant rules in an access control list during the configuration phase. The proposed work defines an access control list as a linked list data structure. A comparison of the proposed work and the conventional approach is also presented.\u

  • Improving Firewall Performance by Eliminating Redundancies
    2014
    Co-Authors: Ajay Krishna Vasu, Ashwin Ganesh, Anirudhan Sudarsan
    Abstract:

    A firewall is a Network Security Device that works to protect an organization's internal Network from both unauthorized and malicious users. It functions by examining all packets that enter any one of its incoming interfaces and comparing the structure of the packet against a set of predefined rules. Each rule specifies if a packet corresponding to the rule is to be permitted or denied. This set of rules is called an access control list (ACL) and it forms the basis of a firewall's policy. Incorrect configuration of the firewall can lead to redundant rules which cause performance degradation. We propose an algorithm to identify and eliminate redundant rules in an access control list during the configuration phase. The proposed work defines an access control list as a linked list data structure. A comparison of the proposed work and the conventional approach is also presented

Shankar Hari - One of the best experts on this subject based on the ideXlab platform.

  • context sharing between endpoint Device and Network Security Device using in band communications
    2017
    Co-Authors: Shankar Hari, Kleopa Constantinos
    Abstract:

    A Network Security Device (NSD) is connected between a Network and an endpoint Device configured to host a client application. The client application communicates with the Network through the Network Security Device using a request-response protocol. The NSD receives from the client application a request destined for the Network and that seeks a response from the Network. The request has a context header including context information about the client application. The NSD determines whether the client application or a file accessed thereby has a suspicious nature based on the context information. If it is determined that the client application or the file accessed thereby has a suspicious nature, the NSD blocks the request from the Network, and sends to the client application a response indicating the block.