Improving Packet Filters Management Through Automatic and Dynamic Schemes

摘要

The development of complex access control architectures raises the problem of their management. In this article, we describe an architecture providing packet filters configuration in Internet based networks. The performance of the access control process heavily depends on the number of rules used to define the access control service. Therefore an efficient access control architecture relies on a clever access control rule configuration. The current approaches to this problem are based on a static description of the network which can force security officers to chose between efficiency and thus eliminates this limitation while proposing three optimisations in order to provide the access control processes with optimal configurations.