Entry Xu:1999:DHP from tissec.bib

Last update: Sun Oct 15 02:58:48 MDT 2017                Valid HTML 3.2!

Index sections

Top | Symbols | Numbers | Math | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

BibTeX entry

@Article{Xu:1999:DHP,
  author =       "Jun Xu and Mukesh Singhal",
  title =        "Design of a High-Performance {ATM} Firewall",
  journal =      j-TISSEC,
  volume =       "2",
  number =       "3",
  pages =        "269--294",
  month =        aug,
  year =         "1999",
  CODEN =        "ATISBQ",
  ISSN =         "1094-9224 (print), 1557-7406 (electronic)",
  ISSN-L =       "1094-9224",
  bibdate =      "Thu Oct 26 11:39:38 MDT 2000",
  bibsource =    "http://www.acm.org/tissec/contents/v2no3.html;
                 http://www.math.utah.edu/pub/tex/bib/tissec.bib",
  URL =          "http://www.acm.org/pubs/citations/journals/tissec/1999-2-3/p269-xu/",
  abstract =     "A router-based packet-filtering firewall is an
                 effective way of protecting an enterprise network from
                 unauthorized access. However, it will not work
                 efficiently in an ATM network because it requires the
                 termination of end-to-end ATM connections at a
                 packet-filtering router, which incurs huge overhead of
                 SAR (Segmentation and Reassembly). Very few approaches
                 to this problem have been proposed in the literature,
                 and none is completely satisfactory. In this paper we
                 present the hardware design of a high-speed ATM
                 firewall that does not require the termination of an
                 end-to-end connection in the middle. We propose a novel
                 firewall design philosophy, called Quality of
                 Firewalling (QoF), that applies security measures of
                 different strength to traffic with different risk
                 levels and show how it can be implemented in our
                 firewall. Compared with the traditional firewalls, this
                 ATM firewall performs exactly the same packet-level
                 filtering without compromising the performance and has
                 the same ``look and feel'' by sitting at the chokepoint
                 between the trusted ATM LAN and untrusted ATM WAN. It
                 is also easy to manage and flexible to use.",
  acknowledgement = ack-nhfb,
  fjournal =     "ACM Transactions on Information and System Security",
  journal-URL =  "http://portal.acm.org/browse_dl.cfm?idx=J789",
  keywords =     "asynchronous transfer mode; firewall; packet
                 filtering; switch architecture; TCP/IP",
  subject =      "Computer Systems Organization --- Performance of
                 Systems (C.4): {\bf Performance attributes}; Computer
                 Systems Organization --- Performance of Systems (C.4);
                 Computer Systems Organization ---
                 Computer-Communication Networks --- General (C.2.0);
                 Computer Systems Organization ---
                 Computer-Communication Networks --- Network
                 Architecture and Design (C.2.1): {\bf Asynchronous
                 Transfer Mode (ATM)}; Computer Systems Organization ---
                 Computer-Communication Networks --- Internetworking
                 (C.2.6): {\bf Routers}; Computer Systems Organization
                 --- Computer-Communication Networks --- Local and
                 Wide-Area Networks (C.2.5)",
}

Related entries