NDLI: Cross-domain privacy-preserving cooperative firewall optimization

Content Provider	ACM Digital Library
Author	Chen, Fei Bruhadeshwar, Bezawada Liu, Alex X.
Copyright Year	2013
Abstract	Firewalls have been widely deployed on the Internet for securing private networks. A firewall checks each incoming or outgoing packet to decide whether to accept or discard the packet based on its policy. Optimizing firewall policies is crucial for improving network performance. Prior work on firewall optimization focuses on either intrafirewall or interfirewall optimization within one administrative domain where the privacy of firewall policies is not a concern. This paper explores interfirewall optimization across administrative domains for the first time. The key technical challenge is that firewall policies cannot be shared across domains because a firewall policy contains confidential information and even potential security holes, which can be exploited by attackers. In this paper, we propose the first cross-domain privacy-preserving cooperative firewall policy optimization protocol. Specifically, for any two adjacent firewalls belonging to two different administrative domains, our protocol can identify in each firewall the rules that can be removed because of the other firewall. The optimization process involves cooperative computation between the two firewalls without any party disclosing its policy to the other. We implemented our protocol and conducted extensive experiments. The results on real firewall policies show that our protocol can remove as many as 49% of the rules in a firewall, whereas the average is 19.4%. The communication cost is less than a few hundred kilobytes. Our protocol incurs no extra online packet processing overhead, and the offline processing time is less than a few hundred seconds.
Starting Page	857
Ending Page	868
Page Count	12
File Format	PDF
ISSN	10636692
DOI	10.1109/TNET.2012.2217985
Volume Number	21
Issue Number	3
Journal	IEEE/ACM Transactions on Networking (TON)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-06-01
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Firewall optimization Privacy
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering Computer Networks and Communications Software Computer Science Applications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Cross-Domain Privacy-Preserving Cooperative Firewall Optimization

Privacy-preserving quantification of cross-domain network reachability

Privacy-Preserving Quantification of Cross-Domain Network Reachability

A cross-domain privacy-preserving protocol for cooperative firewall optimization

Privacy- and integrity-preserving range queries in sensor networks

Cross-Domain Privacy-Preserving Cooperative Firewall Optimization 1

Privacy- and Integrity-Preserving Range Queries in Sensor Networks

A cross-domain privacy-preserving protocol for cooperative firewall optimization (2011)

Optimizing TCP forwarder performance

Cross-domain privacy-preserving cooperative firewall optimization

Similar Documents

Cross-Domain Privacy-Preserving Cooperative Firewall Optimization

Privacy-preserving quantification of cross-domain network reachability

Privacy-Preserving Quantification of Cross-Domain Network Reachability

A cross-domain privacy-preserving protocol for cooperative firewall optimization

Privacy- and integrity-preserving range queries in sensor networks

Cross-Domain Privacy-Preserving Cooperative Firewall Optimization 1

Privacy- and Integrity-Preserving Range Queries in Sensor Networks

A cross-domain privacy-preserving protocol for cooperative firewall optimization (2011)

Optimizing TCP forwarder performance

Cross-domain privacy-preserving cooperative firewall optimization