arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1201.4555cs.NIcs.CR
收藏

网络安全框架中分布式防火墙应用的分块实现

Implementation of Portion Approach in Distributed Firewall Application for Network Security Framework

Harleen Kaur, Omid MahdiEbadati E., M. Afshar Alm

摘要:

本研究的目的是寻求防火墙之间的协作,达到分布式安全策略的能力;前端实体可能会受到入侵者的大量干扰,因此需要将该实体与后端实体分离,以进行安全域保护;协作安全实体在组织中具有各种任务,并且有一定的安全策略可供应用;像DPFF这样的实体必须受到保护,不受外界的影响。防火墙通常被用作网络框架中的主要安全层。本文提出了一种基于IPtable防火墙的DPFF框架,该框架的特定部分是作为防御层,通过提出的部分逼近算法,利用检测和策略更新机制来减少流量和效率,通过动态的安全和策略更新来控制框架的安全性。给出了DPFF策略更新机制的使用方法。完整的框架意味着一个分布式防火墙,其中管理员配置策略规则集,这可以是单独的,也可以是从管理节点侧。

英文摘要:

The stimulate of this research seeks collaboration of firewalls which, could reach to the capability of distributed points of security policy; the front-end entity may much interact by the invaders so the separation between this entity and back-end entity to make the secure domain protection is necessary; collaborative security entity has the various task in the organization and there is a certain security policy to apply in; the entities like DPFF have to be protected from outsiders. Firewalls are utilized typically to be the main layer of security in the network framework. The research is presented the particular segment of the proposed framework that DPFF based on the developed iptable firewall to be the layers of defense, which is protected front and backend of the framework with a dynamic security and policy update to control the framework's safeguard through proposed portion approach algorithm that utilize to reduce the traffic and efficiency in detection and policy update mechanism. The policy update mechanism for DPFF is given the way of its employment. The complete framework signifies a distributed firewall, where the administrator configures the policy rules set, which could be separately or else from administration nodes' side.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑