A new approach to deploy a self-adaptive distributed firewall

DA COSTA JÚNIOR, Edmilson P, DA SILVA, Carlos Eduardo, PINHEIRO, Marcos and SAMPAIO, Silvio (2018). A new approach to deploy a self-adaptive distributed firewall. Journal of Internet Services and Applications, 9 (12).

DaSilva-NewApproachToDeploy(VoR).pdf - Published Version
Creative Commons Attribution.

Download (5MB) | Preview
Official URL: https://jisajournal.springeropen.com/articles/10.1...
Open Access URL: https://jisajournal.springeropen.com/track/pdf/10.... (Published version)
Link to published version:: https://doi.org/10.1186/s13174-018-0083-6


Distributed firewall systems emerged with the proposal of protecting individual hosts against attacks originating from inside the network. In these systems, firewall rules are centrally created, then distributed and enforced on all servers that compose the firewall, restricting which services will be available. However, this approach lacks protection against software vulnerabilities that can make network services vulnerable to attacks, since firewalls usually do not scan application protocols. In this sense, from the discovery of any vulnerability until the publication and application of patches there is an exposure window that should be reduced. In this context, this article presents Self-Adaptive Distributed Firewall (SADF). Our approach is based on monitoring hosts and using a vulnerability assessment system to detect vulnerable services, integrated with components capable of deciding and applying firewall rules on affected hosts. In this way, SADF can respond to vulnerabilities discovered in these hosts, helping to mitigate the risk of exploiting the vulnerability. Our system was evaluated in the context of a simulated network environment, where the results achieved demonstrate its viability.

Item Type: Article
Uncontrolled Keywords: 08 Information and Computing Sciences
Identification Number: https://doi.org/10.1186/s13174-018-0083-6
SWORD Depositor: Symplectic Elements
Depositing User: Symplectic Elements
Date Deposited: 10 Dec 2019 11:30
Last Modified: 18 Mar 2021 03:05
URI: https://shura.shu.ac.uk/id/eprint/25227

Actions (login required)

View Item View Item


Downloads per month over past year

View more statistics