Imperial College London

Professor Emil Lupu

Faculty of EngineeringDepartment of Computing

Professor of Computer Systems
 
 
 
//

Contact

 

e.c.lupu Website

 
 
//

Location

 

564Huxley BuildingSouth Kensington Campus

//

Summary

 

Publications

Citation

BibTex format

@inproceedings{Lee:2002,
author = {Lee, TK and Yusuf, S and Luk, W and Sloman, M and Lupu, E and Dulay, N},
pages = {352--355},
publisher = {IEEE},
title = {Development framework for firewall processors},
url = {http://pubs.doc.ic.ac.uk/DevelopmentFirewall/DevelopmentFirewall.pdf},
year = {2002}
}

RIS format (EndNote, RefMan)

TY  - CPAPER
AB - High-performance firewalls can benefit from the increasing size, speed and flexibility of advanced reconfigurable hardware. However direct translation of conventional firewall rules in a router-based rule set often leads to inefficient hardware implementation. Moreover, such lowlevel description of firewall rules tends to be difficult to manage and to extend. We describe a framework, based on the high-level policy specification language Ponder for capturing firewall rules as authorization policies with user-definable constraints. Our framework supports optimisations to achieve efficient utilisation of hardware resources. A pipelined firewall implementation developed using this approach running at 10 MHz is capable of processing 2.5 million packets per second, which provides similar performance to a version without optimisation and is about 50 times faster than a software implementation running on a 700 MHz PIII processor.
AU - Lee,TK
AU - Yusuf,S
AU - Luk,W
AU - Sloman,M
AU - Lupu,E
AU - Dulay,N
EP - 355
PB - IEEE
PY - 2002///
SP - 352
TI - Development framework for firewall processors
UR - http://pubs.doc.ic.ac.uk/DevelopmentFirewall/DevelopmentFirewall.pdf
ER -