NDLI: Bit vector algorithms enabling high-speed and memory-efficient firewall blacklisting

Please wait, while we are loading the content...

Courseware for teaching analytical reasoning principles: a hands-on laboratory

Implementation considerations for improving data integrity in normalized relational databases

Impact of simulation time and network shape on the hop count and stability of routes for mobile ad hoc networks

Sub-graphing web service ontologies to support resource constraints of mobile devices

CPATH τεχνη evaluation: background, experiment design and current status

Compositional performance prediction exemplified using generic object finalization analysis

AVARI: animated virtual agent retrieving information

Increasing computer science participation in the FIRST robotics competition with robot simulation

Bit vector algorithms enabling high-speed and memory-efficient firewall blacklisting

C preprocessor use in numerical tools: an empirical analysis

Implementing a hierarchical Bayesian visual cortex model on multi-core processors

Programming Khepera II robot for autonomous navigation and exploration using the hybrid architecture

A study of a KVM-based cluster for grid computing

Formal verification of AADL behavior models: a feasibility investigation

Using Bloom's taxonomy to code verbal protocols of students solving a data structure problem

Tricolorable torus knots are NP-complete

Building content dictionaries for geometric algebra in OMDoc format

A lab course for discrete mathematics

Using social networking to teach new software

A generational genetic algorithm with dynamic population size

The effects of network delay on task performance in a visual-haptic collaborative environment

Time series analysis of open-source software projects

Using computer graphics to explore object oriented concepts using C

Feature location by IR modules and call graph

Students create game-based online learning environment that teaches Java programing

Automatic congestion detection and visualization using networked GPS unit data

Towards solving similarity search problems using fuzzy concept for multi-dimensional data

"GridWorld" makes for a great world

Incrementally distributed B+ trees: approaches and challenges

A mobility camouflaging evaluation tool

A mobile agent based framework for web services

Improvement of software reliability modeling predictions by the detection and removal of test outliers

Mobile learning for just-in-time applications

Educational software packages for the One Laptop Per Child (OLPC) XO laptop

Applying randomized projection to aid prediction algorithms in detecting high-dimensional rogue applications

Ginger: implementing a new Lisp family syntax

Detection of moving objects using incremental connectivity outlier factor algorithm

The motion control of a mobile robot using multiobjective decision making

Towards policy driven self-configuration of user-centric communication

Investigation of domain effects on software

A practical state machine project

The color cut quantization algorithm

A novel method for MicroRNA secondary structure prediction using a bottom-up algorithm

Deriving ontological structure from a folksonomy

Searching for adaptive resource allocation strategies in Arabidopsis lyrata using genetic algorithms

Integration of environmental contexts and personal factors for coordinating garments: an environmental user interface paradigm to enrich user interactions

Predicting precedence delays in loudspeaker configuration

Model-based software design tools for the cell processor

Teaching with security in mind

On reduced neighborhood mutation analysis using a single mutagenic operator

Framework for the design of web-based learning for digital forensics labs

Reflection symmetry detection to reduce the state space of Markovian models

xDOC: a system for XML based document annotation and searching

Proactive database index tuning through data threshold prediction

Understanding distributed denial of service with object oriented simulation

In-world data services in virtual environments

Toward automatic artifact matching for tool evaluation

Talking back to VBgov.com

The teaching of immunology using educational: gaming paradigms

A secure unidirectional proxy re-encryption using identity and secret key exchange

Identifying task-level parallelism by functional transformation with side-effect domains

Implementation and empirical evaluations of floor control protocols on PlanetLab network

Localization with the iRobot Create

Refining and reasoning about nonfunctional requirements

Evolutionary, not revolutionary, programming exercises using design patterns in an OO data structures course

The three-hub center allocation problem

Security metrics for software systems

Facilitating web-based student team collaboration with MessageGrid

Unsupervised anomaly detection with minimal sensing

A technique for correlating images on head mounted displays with virtual background scenery

A self-configuring test harness for web applications

An overview of programming language based security

Why an AI research team adopted XP practices

Haptic virtual manipulatives for enhancing K-12 special education

FI-based file access predictor

A dynamic insertion approach for multi-dimensional data using index structures

GraphPad: a CS2/CS7 tool for graph creation

Semantic web in eHealth

Perceiving the lengths of real and virtual objects using kinesthetic touch

A case for compiler-driven superpage allocation

A hybrid approach to mining frequent sequential patterns

Cursor and read only connection animations

Future direction of incremental association rules mining

Space-efficient simulation of quantum computers

Effects of multiple collaborated data streams in wireless sensor networks

Using metaprogramming to implement a testing framework

Assessing the efficacy of a mixed-modal auditory display system for enhancing auditory sensation

Increasing team collaboration using a mobile device-based communication tool

Bit vector algorithms enabling high-speed and memory-efficient firewall blacklisting

Content Provider	ACM Digital Library
Author	Keeling, David Thames, Lane Abler, Randal
Abstract	In a world of increasing Internet connectivity coupled with increasing computer security risks, security conscious network applications implementing blacklisting technology are becoming very prevalent because it provides the ability to prevent information exchange from known malicious sources. Current technology implementing blacklisting does so at the application level. However, there are numerous benefits for implementing blacklisting filters in the firewall. These benefits include reduced application workload and reduced bandwidth consumption. But, because the de facto algorithm in firewalls is based on a linear search first match principle, large blacklists are not feasible to implement in firewalls due to the O(N) timing complexity of linear search methods. This paper addresses this issue by describing techniques that solve the O(N) time complexity issue without changing the internal input-output behavior of the firewall.
Starting Page	1
Ending Page	6
Page Count	6
File Format	PDF
ISBN	9781605584218
DOI	10.1145/1566445.1566476
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-03-19
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Path matrix Bit vectors Blacklisting Packet classification Firewalls
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in