Proactive Security Mechanism and Design for Firewall  

作　　者：Saleem-Ullah Lar Xiaofeng Liao Aqeel ur Rehman MA Qinglu 

机构地区：[1]不详

出　　处：《Journal of Information Security》2011年第3期122-130,共9页信息安全（英文）

摘　　要：In this paper we have present the architecture and module for internet firewall. The central component is fuzzy controller while properties of packets are fuzzified as inputs. On the basis of proposed fuzzy security algorithm, we have figured out security level of each packet and adjust according to packets dynamic states. Internet firewall can respond to these dynamics and take respective actions accordingly. Therefore, proactive firewall solves the conflict between speed and security by providing high performance and high security. Simulation shows that if the response value is in between 0.7 and 1 it belongs to high security.In this paper we have present the architecture and module for internet firewall. The central component is fuzzy controller while properties of packets are fuzzified as inputs. On the basis of proposed fuzzy security algorithm, we have figured out security level of each packet and adjust according to packets dynamic states. Internet firewall can respond to these dynamics and take respective actions accordingly. Therefore, proactive firewall solves the conflict between speed and security by providing high performance and high security. Simulation shows that if the response value is in between 0.7 and 1 it belongs to high security.

关 键 词：FIREWALL SECURITY SECURITY EVALUATION NETWORK SECURITY 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]