Improving the performance of port range check for network packet filtering

2013 ◽  
Vol 19 (1) ◽  
pp. 1-21 ◽  
Author(s):  
Yen-Jen Chang ◽  
Hsiang-Yu Lu
Keyword(s):  
Packet Filtering ◽  
Range Check

Method of constucting packet filtering rules

2019 ◽  
Author(s):  
Karimov Madjid Malikovich ◽  
Gulomov Sherzod Rajaboevich ◽  
Yusupov Bokhodir Karamatovich
Keyword(s):  
Packet Filtering

Packet Filtering Based on Source Router Marking and Hop-Count

2007 ◽  
Author(s):  
Kashif Ali ◽  
Mohammad Zulkernine ◽  
Hossam Hassanein
Keyword(s):  
Hop Count ◽  
Packet Filtering

scholarly journals A Tunnel-Aware Language for Network Packet Filtering

2010 ◽  
Author(s):  
Luigi Ciminiera ◽  
Marco Leogrande ◽  
Ju Liu ◽  
Fulvio Risso ◽  
Olivier Morandi
Keyword(s):  
Packet Filtering

- Packet Filtering and Inspection

2012 ◽  
pp. 214-305
Keyword(s):  
Packet Filtering

scholarly journals Intelligent IP Packet Filtering

2002 ◽  
pp. 521-533
Author(s):  
M. Hashem ◽  
A. Mohamed ◽  
M. Wahib
Keyword(s):  
Packet Filtering ◽  
Ip Packet

scholarly journals Enterprise Network Packet Filtering for Mobile Cryptographic Identities

2010 ◽  
Vol 1 (1) ◽  
pp. 79-94 ◽  
Author(s):  
Janne Lindqvist ◽  
Essi Vehmersalo ◽  
Miika Komu ◽  
Jukka Manner
Keyword(s):  
Network Security ◽  
Security Policy ◽  
Data Transfer ◽  
The Internet ◽  
Policy Enforcement ◽  
Enterprise Network ◽  
Packet Filtering ◽  
Enterprise Network Security ◽  
Host Identity ◽  
Mobile Clients

Firewalls are an essential component of the Internet and enterprise network security policy enforcement today. The configurations of enterprise firewalls are typically rather static. Even if client’s IP addresses can be dynamically added to the packet filtering rules, the services allowed through the firewall are commonly still fixed. In this paper, we present a transparent firewall configuration solution based on mobile cryptographic identifiers of Host Identity Protocol (HIP). HIP allows a client to protect the data transfer with IPsec ESP, and supports dynamic address changes for mobile clients. The HIP-based firewall learns the identity of a client when it communicates with the server over HIP. The firewall configures the necessary rules based on HIP control messages passing through the firewall. The solution is secure and flexible, and introduces only minimal latency to the initial HIP connection establishment.

Sign in / Sign up

Export Citation Format

Share Document