A new approach to deploy a self-adaptive distributed firewall

DA COSTA JÚNIOR, Edmilson P, DA SILVA, Carlos Eduardo, PINHEIRO, Marcos and SAMPAIO, Silvio (2018). A new approach to deploy a self-adaptive distributed firewall. Journal of Internet Services and Applications, 9 (12).

[img]
Preview
PDF
DaSilva-NewApproachToDeploy(VoR).pdf - Published Version
Creative Commons Attribution.

Download (5MB) | Preview
Official URL: https://jisajournal.springeropen.com/articles/10.1...
Open Access URL: https://jisajournal.springeropen.com/track/pdf/10.... (Published version)
Link to published version:: https://doi.org/10.1186/s13174-018-0083-6
Related URLs:

    Abstract

    Distributed firewall systems emerged with the proposal of protecting individual hosts against attacks originating from inside the network. In these systems, firewall rules are centrally created, then distributed and enforced on all servers that compose the firewall, restricting which services will be available. However, this approach lacks protection against software vulnerabilities that can make network services vulnerable to attacks, since firewalls usually do not scan application protocols. In this sense, from the discovery of any vulnerability until the publication and application of patches there is an exposure window that should be reduced. In this context, this article presents Self-Adaptive Distributed Firewall (SADF). Our approach is based on monitoring hosts and using a vulnerability assessment system to detect vulnerable services, integrated with components capable of deciding and applying firewall rules on affected hosts. In this way, SADF can respond to vulnerabilities discovered in these hosts, helping to mitigate the risk of exploiting the vulnerability. Our system was evaluated in the context of a simulated network environment, where the results achieved demonstrate its viability.

    Item Type: Article
    Uncontrolled Keywords: 08 Information and Computing Sciences
    Identification Number: https://doi.org/10.1186/s13174-018-0083-6
    SWORD Depositor: Symplectic Elements
    Depositing User: Symplectic Elements
    Date Deposited: 10 Dec 2019 11:30
    Last Modified: 10 Dec 2019 11:30
    URI: http://shura.shu.ac.uk/id/eprint/25227

    Actions (login required)

    View Item View Item

    Downloads

    Downloads per month over past year

    View more statistics