Abstract
The given article is a continuation of a number of works devoted to the development of models and methods for ranging the filtration rules to prevent a decrease in the firewall performance caused by the use of a sequential scheme for checking packet compliance with the rules, as well as by the heterogeneity and variability of network traffic. The article includes a description of a firewall mathematical model given in the form of a complex system and a queuing system with a phase-type discipline for request servicing, which formalizes the network traffic filtering process with the functionality of ranging the rules. The purpose of modeling is to obtain estimates for major firewall performance metrics for various network traffic behavior scenarios, as well as to evaluate an increase in the firewall performance due to ranging a filtration rule set. Calculation of estimates for the firewall (FW) performance metrics was made using the analytical method for a Poisson request flow. Based on the analysis of the modeling results, conclusions were drawn on the effectiveness of ranging the filtration rules in order to improve the firewall performance for traffic scenarios that are close to real ones.
Publisher
Peoples' Friendship University of Russia
Reference8 articles.
1. Evaluation of firewall performance when ranging a filtration rule set
2. Firewall Simulator Development for Performance Evaluation of Ranging a Filtration Rules Set
3. Firewall Simulation Model with Filtering Rules Ranking
4. V. Katkovnik, Non-parametric data identification and smoothing: local approximation method [Neparametricheskaya identifikaciya i sglazhivanie danny‘x: metod lokal‘noj approksimacii]. The science. Main editorial office of physical and mathematical literature Publ., 1985, 336 pp., in Russian.
5. W. Hardle, Applied nonparametric regression. Cambridge: Cambridge university press, 1990, 349 pp.