Improving packet filters management through automatic and dynamic schemes

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

The development of complex access control architectures raises the problem of their management. In this article, we describe an architecture providing packet filters configuration in Internet based networks. The performance of the access control process heavily depends on the number of rules used to define the access control service. Therefore an efficient access control architecture relies on a clever access control rule configuration. The current approaches to this problem are based on a static description of the network which can force security officers to choose between efficiency and manageability. Our distribution architecture doesn't rely on a model of the network and thus eliminates this limitation while proposing three optimisations in order to provide the access control processes with optimal configurations.

Original languageEnglish
Title of host publicationInformation Security for global information infrastructures IFIP TC11- 16th Annual Working Conference on Information Security, 2000
EditorsSihan Qing, Jan H.P. Eloff
PublisherSpringer New York LLC
Pages331-340
Number of pages10
ISBN (Print)9781475754797
DOIs
Publication statusPublished - 1 Jan 2017
Externally publishedYes
Event16th IFIP World Computer Congress, WCC 2000 - Beijing, China
Duration: 21 Aug 200025 Aug 2000

Publication series

NameIFIP Advances in Information and Communication Technology
Volume47
ISSN (Print)1868-4238
ISSN (Electronic)1868-422X

Conference

Conference16th IFIP World Computer Congress, WCC 2000
Country/TerritoryChina
CityBeijing
Period21/08/0025/08/00

Keywords

  • Access control
  • Management
  • Packet filters
  • Security

Fingerprint

Dive into the research topics of 'Improving packet filters management through automatic and dynamic schemes'. Together they form a unique fingerprint.

Cite this