DA COSTA JÚNIOR, Edmilson P, DA SILVA, Carlos Eduardo, PINHEIRO, Marcos and SAMPAIO, Silvio (2018). A new approach to deploy a self-adaptive distributed firewall. Journal of Internet Services and Applications, 9 (12).
|
PDF
DaSilva-NewApproachToDeploy(VoR).pdf - Published Version Creative Commons Attribution. Download (5MB) | Preview |
Abstract
Distributed firewall systems emerged with the proposal of protecting individual hosts against attacks originating from inside the network. In these systems, firewall rules are centrally created, then distributed and enforced on all servers that compose the firewall, restricting which services will be available. However, this approach lacks protection against software vulnerabilities that can make network services vulnerable to attacks, since firewalls usually do not scan application protocols. In this sense, from the discovery of any vulnerability until the publication and application of patches there is an exposure window that should be reduced. In this context, this article presents Self-Adaptive Distributed Firewall (SADF). Our approach is based on monitoring hosts and using a vulnerability assessment system to detect vulnerable services, integrated with components capable of deciding and applying firewall rules on affected hosts. In this way, SADF can respond to vulnerabilities discovered in these hosts, helping to mitigate the risk of exploiting the vulnerability. Our system was evaluated in the context of a simulated network environment, where the results achieved demonstrate its viability.
Item Type: | Article |
---|---|
Uncontrolled Keywords: | 08 Information and Computing Sciences |
Identification Number: | https://doi.org/10.1186/s13174-018-0083-6 |
SWORD Depositor: | Symplectic Elements |
Depositing User: | Symplectic Elements |
Date Deposited: | 10 Dec 2019 11:30 |
Last Modified: | 18 Mar 2021 03:05 |
URI: | https://shura.shu.ac.uk/id/eprint/25227 |
Actions (login required)
View Item |
Downloads
Downloads per month over past year