DOE Patents title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Method, systems, and computer program products for implementing function-parallel network firewall

Abstract

Methods, systems, and computer program products for providing function-parallel firewalls are disclosed. According to one aspect, a function-parallel firewall includes a first firewall node for filtering received packets using a first portion of a rule set including a plurality of rules. The first portion includes less than all of the rules in the rule set. At least one second firewall node filters packets using a second portion of the rule set. The second portion includes at least one rule in the rule set that is not present in the first portion. The first and second portions together include all of the rules in the rule set.

Inventors:
 [1];  [1]
  1. Winston-Salem, NC
Issue Date:
Research Org.:
Wake Forest University (Winston-Salem, NC)
Sponsoring Org.:
USDOE
OSTI Identifier:
1028984
Patent Number(s):
8037517
Application Number:
11/316,331
Assignee:
Wake Forest University (Winston-Salem, NC)
Patent Classifications (CPCs):
H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
DOE Contract Number:  
FG02-03ER25581
Resource Type:
Patent
Country of Publication:
United States
Language:
English
Subject:
97 MATHEMATICS AND COMPUTING

Citation Formats

Fulp, Errin W, and Farley, Ryan J. Method, systems, and computer program products for implementing function-parallel network firewall. United States: N. p., 2011. Web.
Fulp, Errin W, & Farley, Ryan J. Method, systems, and computer program products for implementing function-parallel network firewall. United States.
Fulp, Errin W, and Farley, Ryan J. Tue . "Method, systems, and computer program products for implementing function-parallel network firewall". United States. https://www.osti.gov/servlets/purl/1028984.
@article{osti_1028984,
title = {Method, systems, and computer program products for implementing function-parallel network firewall},
author = {Fulp, Errin W and Farley, Ryan J},
abstractNote = {Methods, systems, and computer program products for providing function-parallel firewalls are disclosed. According to one aspect, a function-parallel firewall includes a first firewall node for filtering received packets using a first portion of a rule set including a plurality of rules. The first portion includes less than all of the rules in the rule set. At least one second firewall node filters packets using a second portion of the rule set. The second portion includes at least one rule in the rule set that is not present in the first portion. The first and second portions together include all of the rules in the rule set.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = {2011},
month = {10}
}

Works referenced in this record:

Small forwarding tables for fast routing lookups
journal, October 1997


On self-organizing sequential search heuristics
journal, February 1976


Complexity of Scheduling under Precedence Constraints
journal, February 1978


Modeling and Management of Firewall Policies
journal, April 2004


Development framework for firewall processors
conference, January 2002

  • Lee, T. K.; Yusuf, S.; Luk, W.
  • 2002 IEEE International Conference on Field-Programmable Technology (FPT), 2002 IEEE International Conference on Field-Programmable Technology, 2002. (FPT). Proceedings.
  • https://doi.org/10.1109/FPT.2002.1188709

Counting linear extensions is #P-complete
conference, January 1991


A parallel packet screen for high speed networks
conference, January 1999


Using IDDs for Packet Filtering
journal, June 2002


Balancing Trie-Based Policy Representations for Network Firewalls
conference, January 2006


Detecting and resolving packet filter conflicts
conference, January 2000

  • Hari, A.; Suri, S.; Parulkar, G.
  • Proceedings IEEE INFOCOM 2000. Conference on Computer Communications. Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societies (Cat. No.00CH37064)
  • https://doi.org/10.1109/INFCOM.2000.832496

Fast packet classification for two-dimensional conflict-free filters
conference, January 2001

  • Warkhede, P.; Suri, S.; Varghese, G.
  • Proceedings IEEE INFOCOM 2001. Conference on Computer Communications. Twentieth Annual Joint Conference of the IEEE Computer and Communications Society (Cat. No.01CH37213)
  • https://doi.org/10.1109/INFCOM.2001.916639

Algorithms for trie compaction
journal, June 1984


Network firewalls
journal, September 1994


Analysis of a heuristic for full trie minimization
journal, September 1981


Router plugins: a software architecture for next-generation routers
journal, January 2000


On the self-similar nature of Ethernet traffic (extended version)
journal, January 1994


Fast and scalable layer four switching
journal, October 1998


Various optimizers for single-stage production
journal, March 1956