Home

About

Advanced Search

Browse by Discipline

Scientific Societies

E-print Alerts

Add E-prints

E-print Network
FAQHELPSITE MAPCONTACT US


  Advanced Search  

 
IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, VOL. 24, NO. 10, OCTOBER 2006 1817 On Dynamic Optimization of Packet
 

Summary: IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, VOL. 24, NO. 10, OCTOBER 2006 1817
On Dynamic Optimization of Packet
Matching in High-Speed Firewalls
Hazem Hamed, Adel El-Atawy, and Ehab Al-Shaer
Abstract--Packet matching plays a critical role in the perfor-
mance of many network devices and a tremendous amount of re-
search has already been invested to come up with better optimized
packet filters. However, most of the related works use determin-
istic techniques and do not exploit the traffic characteristics in their
optimization schemes. In addition, most packet classifiers give no
specific consideration for optimizing packet rejection, which is im-
portant for many filtering devices like firewalls.
Our contribution in this paper is twofold. First, we present
a novel algorithm for maximizing early rejection of unwanted
flows with minimal impact on other flows. Second, we present a
new packet filtering dynamic optimization technique that uses
statistical search trees to utilize traffic characteristics and mini-
mize the average packet matching time. The proposed techniques
timely adapt to changes in the traffic conditions by performing
simple calculations for optimizing the search data structure.

  

Source: Al-Shaer, Ehab - School of Computer Science, Telecommunications and Information Systems, DePaul University

 

Collections: Computer Technologies and Information Sciences