Imperial College London

Professor Emil Lupu

Faculty of EngineeringDepartment of Computing

Professor of Computer Systems



e.c.lupu Website




564Huxley BuildingSouth Kensington Campus






BibTex format

author = {Lee, TK and Yusuf, S and Luk, W and Sloman, M and Lupu, E and Dulay, N},
pages = {352--355},
publisher = {IEEE},
title = {Development framework for firewall processors},
url = {},
year = {2002}

RIS format (EndNote, RefMan)

AB - High-performance firewalls can benefit from the increasing size, speed and flexibility of advanced reconfigurable hardware. However direct translation of conventional firewall rules in a router-based rule set often leads to inefficient hardware implementation. Moreover, such lowlevel description of firewall rules tends to be difficult to manage and to extend. We describe a framework, based on the high-level policy specification language Ponder for capturing firewall rules as authorization policies with user-definable constraints. Our framework supports optimisations to achieve efficient utilisation of hardware resources. A pipelined firewall implementation developed using this approach running at 10 MHz is capable of processing 2.5 million packets per second, which provides similar performance to a version without optimisation and is about 50 times faster than a software implementation running on a 700 MHz PIII processor.
AU - Lee,TK
AU - Yusuf,S
AU - Luk,W
AU - Sloman,M
AU - Lupu,E
AU - Dulay,N
EP - 355
PY - 2002///
SP - 352
TI - Development framework for firewall processors
UR -
ER -