Automated Framework for Policy Optimizationin Firewalls and Security Gateways

摘要

The challenge to address in multi-firewall and security gateway environment is toimplement conflict-free policies, necessary to avoid security inconsistency, and to optimize, atthe same time, performances in term of average filtering time, in order to make firewallsstronger against DoS and DDoS attacks. Additionally the approach should be real time, basedon the characteristics of network traffic. Our work defines an algorithm to find conflict freeoptimized device rule sets in real time, by relying on information gathered from traffic analysis.We show results obtained from our test environment demonstrating for computational powersavings up to 24% with fully conflict free device policies.