Types Of Firewalls Research Articles

Functional features of well-known means of network shielding

The work briefly reviews the history, types, and capabilities of the main types of firewalls (FW). Firewalls are an important tool for protecting network resources from various information security threats. With the development of technology and the changing nature of attacks, especially those involving artificial intelligence (IoT), firewalls have also evolved, acquiring new functions and capabilities. This work provides a short survey of the main types, and capabilities of firewall technology, providing solutions to issues of comprehensive protection of network equipment and information resources from modern security threats. Different types of firewalls are used depending on the conditions of operation and purpose of the basic information and communication system (ICS), as well as on the place of their (FW) integration into the network or virtual infrastructure of modern information systems. For integrated networks that require a high level of their security, productivity and flexibility, firewalls of the business segment of generation «Next-generation» and «Threat-focused NGFW» are definitely the best choice. Attention was drawn to the fact that mobile firewalls should in every way contribute to the maintenance of resource consensus and eliminate a possible disparity in the performance of networked mobile applications. Adaptability to mobility of current communication systems (Wi-Fi, GSM and others) determines the specificity of security threats for mobile devices and It defines their key feature. This feature is based on permanent readiness for seamless transitions (reconnections) between different networks in conditions of constant energy shortage and limited available computing resources (meaning gadgets). Highlights the main trends, prospects for the development and implementation of different types of firewalls, including the impact of artificial intelligence, machine learning, cloud technologies and the Internet of Things as well as important aspects of their (FW) scope. It is emphasized that the introduction of FW does not replace other security technologies and tools, but effectively expands the existing arsenal of countering new security threats (primarily as an instrument of proactive countermeasures and rapid response to complex network incidents). The article may be useful for students, researchers, and information security professionals who seek to expand their competencies related to the development and operation of modern means of network protection.

A Virtual Data Center Comparison Of Different Firewalls' Performance

Whether virtual or real, every data centre depends on its network, and the firewall is a crucial component of that network for secure communication. Different types of firewalls, such as software firewalls, physical firewalls, virtual appliance firewalls, and kernel-integrated firewalls, can secure data centre connections. When choosing a firewall, there are many things to take into account, especially in a virtualized data centre where each firewall behaves differently depending on the situation. Reduced costs, effective administration extensibility, greater resource usage, scalability, and energy resilience are just a few benefits that virtualized data centres are supposed to produce. In this study, the use of firewalls is examined in relation to virtualized data centres. The effectiveness of several kinds of firewalls, including virtual firewalls, physical firewalls, and software .The performance of various types of firewalls, such as software firewalls, physical firewalls, virtual appliance firewalls, and kernel-integrated firewalls, is being analysed. Virtual data centre firewall implementation and performance comparisons explain how to design and which firewall type provides the best performance. In all conditions, it was shown that kernel-integrated firewalls worked properly. Virtual machine IP addresses and networks can vary, and the kernel-based firewall can dynamically update its rules to keep pace with such changes.

Comparison Of Different Firewalls Performance In A Virtual For Cloud Data Center

Every data centre, whether virtual or physical, relies on its network, and the firewall is an essential part of that network for safe communication. Data centre connection can be protected by a variety of firewall types, including software firewalls, physical firewalls, virtual appliance firewalls, and kernel-integrated firewalls. There are several factors to consider when selecting a firewall, especially in a virtualized data centre, where each firewall works differently in different situations. Virtualized data centres are intended to yield lower budgets, efficient management extensibility, better utilization of available resources, scalability, and energy resilience, among several other advantages. Virtualized data centres are the topic of this study, which examines the application of firewalls. The performance of various types of firewalls, such as software firewalls, physical firewalls, virtual appliance firewalls, and kernel-integrated firewalls, is being analysed. Virtual data centre firewall implementation and performance comparisons explain how to design and which firewall type provides the best performance. In all conditions, it was shown that kernel-integrated firewalls worked properly. Virtual machine IP addresses and networks can vary, and the kernel-based firewall can dynamically update its rules to keep pace with such changes. With its distributed firewall functionality, virtual machines can travel across hypervisors with no disruption to their security settings, if their policies remain the same. A kernel-based, distributed firewall is the best way to protect against viruses.

Multi-layered firewall to mitigate the impact of Distributed Denial of Service on a network

A firewall is one of the key components in securing an organization's network and computational assets against different network and application-based attacks. Most firewall solutions only consider one or two layers of TCP/IP networking architecture to protect against attacks, especially spoofing-based attacks. In contrast, there are some proposed solutions to protect against such attacks. However, these solutions work in areas such as clouds or Software Defined Networks (SDN), and legacy networks cannot utilize such techniques. Therefore, establishing a type of firewall that can be scalable, strong, and easy to implement is a challenge necessary for a new firewall technique to prevail. This paper presents a novel strategy to implement a multi-layered firewall to overcome the current state-of-art firewalls. Our firewall combines a packet-filtering approach (i.e., Internet and Transport layer) with an application layer firewall under the umbrella of Stateful-Packet-Inspection. The experiments were performed in a controlled environment with 1% legitimate packets, and 99% spoofed traffic on average. The Stateful-Packet-Inspection discards any packets based on their traffic flow given to them by the firewall while informing the network administrator about the system breach passively. The results of the experiments are benchmarked with previous works and showed improvement in accuracy by 13.5% and sensitivity by 13.75% while decreasing the false negative rate by 86.5% with minimal computational and network overhead.

Study to analyse, compare and evaluate the performance of next general firewalls: Case of Palo Alto and Fortigate Firewall

The article focuses on analyzing, comparing, and evaluating the performance of the next-generation firewalls, case of Palo Alto Firewall and Fortinet Firewall in practice through the deployment of simulated situations and experimental scenarios that are: using network attacks such as TCP, UDP Flood; evaluate the function of SSL/TLS Inspection, Application Control; Check traffic, latency, packet response time and average throughput values on each network system with each separate firewall. The result shows that both types of firewalls have outstanding performance compared with older generation firewalls and Fortinet Firewall has more outstanding points than Palo Alto Firewall in particular. The research results will be necessary documents for designers, ensuring network safety and security of the network system, and for students and students majoring in Information Technology and Information Security as a reference to make appropriate decisions when using these two types of next-generation firewalls.

Implementation of firewall for web server access management based on application gateway for TNI AD website

Along with the development of information technology, making information security is very important even more so on a network connected to the internet. The imbalance between each development of a technology not accompanied by development in the security system itself. As for the current problem is that there are still state website that are still working with outside companies in terms of network security systems. And most often the target of cyber attacks is the web server. Then any individual or organization is required to have a security system that minimizes of cyber crime. Instead of putting trust in an outside company I better make my own web server security system. The author uses the application gateway method in a firewall. Besides, firewall failover capabilities are evaluated. Based on the overall testing results, application gateway has better performance than other types of firewalls in another website. It has better ability in handling DoS attack, because this firewall works not only based on the secure, destination and attribute of the package, but can reach the contents of the package. It is conclu1ded that application gateway is suitable and safe to use on TNI AD web server.

A Novel Parallel Approach for Disjoint Rule Generation and Optimization (DRGO) in Reconfigurable Firewall Using FPGA

The packet classification is a core function of firewall, which is widely used in various applications of network infrastructure for security purpose. Nowadays, speed of data transfer is in Gbps. So, processing the packet at the same speed is very challenging task to achieve high throughput. In this paper, a field-programmable gate array (FPGA)-based reconfigurable firewall, namely DRGO firewall, is proposed that accepts only unique rule and processes packet in parallel. DRGO firewall resolves rule ambiguity in the rule set to perform deterministic action for an incoming packet and minimizes cardinality of ruleset to achieve better space efficiency and higher throughput. Such type of firewall is applicable in any network to classify unknown incoming packets. The storage cost per rule of DRGO firewall is 14 bytes. The proposed approach is implemented on Virtex-6 FPGA, and it achieves throughput of 142 Gbps at the clock rate of 442.6 MHz for minimum packet size of 40 bytes.

Analysis and implementation of the Port Knocking method using Firewall-based Mikrotik RouterOS

Static firewalls such as packet filtering that restrict access based on addresses on NIC (Network Interface Card) devices in the form of MAC addresses will make dependence on the device, this will make it difficult for administrators. This type of firewall is vulnerable to packet spoofing in the form of MAC address spoofing. Firewall port knocking in some previous research, port Knocking using third-party applications that must be installed and dependence on certain. This port knocking method with port programming based on socket programming aims to provide easy access without dependence on IP addresses and Mac addresses or operating systems as well as better security through a tap format that must go through 4 stages, namely having to use the correct protocol type, port number correct, correct order and send the correct string to obtain access rights. The Port knocking method only allows access to clients who have performed the correct and complete knocking port. Knocking port applications are made using socket-based programming that can run on Windows and Linux operating systems and do not need the installation process so that the authentication process is less than 2 seconds. The compatibility of the port Knocking application makes access easier and faster. The port knocking method firewall has a filter effectiveness of 66.7% and better resistance to DDoS attacks than packet filtering based on data service quality. Port Knocking gets RTT value of 380 ms (Medium Category) and Packet loss of 8.3% (Good Category), while packet filtering gets RTT value of 2858 (Poor Category) and Packet Loss of 56.3% (Poor Category).

Thermal Modelling of Cell-to-Cell Fire Propagation and Cascading Thermal Runaway Failure Effects for Lithium-Ion Battery Cells and Modules Using Fire Walls

A model is presented for predicting the cell-to-cell propagation of a thermal runaway/fire in a lithium-ion battery cell to neighboring cells by simulating the temperature development in neighboring cells. The modelling work comprises of two major steps; setting up a model of the cells including the thermal properties of the cells, and then validating the model through experiments where the boundary conditions in the validation test must be determined carefully. The model is developed to allow a fast evaluation of several different preventive means of thermal insulation, it is not modelling the pack and cells to a great detail. Still the experimental validation indicates that the model is good enough to fulfil its purpose of the model. A feasibility study using the model is conducted assessing two different types of fire walls between battery modules of 10 cells. The results show that there is a substantial risk for a cascading of thermal events in a battery pack, although cooling systems and fire walls may mitigate these risks.

A standardized approach to deal with firewall and mobility policies in the IoT

Internet of Things (IoT) is intended to provide a network where information flows could easily be set up between any kinds of products, devices, users and information systems in general. This vision is getting closer to become real due to the continuous development of new information system concepts and technologies. Nonetheless, this new reality requires special attention on particular aspects of the IoT such as security and mobility. First, people and companies want to secure their assets/data using firewalls, which inevitably leads to a challenging conflict between data security and usability. Second, products are becoming increasingly mobile, operating in environments where it can be difficult to contact them directly using their IP address (e.g., due to the presence of NAT or to access restrictions). It might therefore be necessary in some IoT applications to enable two-way communications through any type of firewall, e.g. to enable real-time control and maintenance. Quantum Lifecycle Management (QLM) messaging standards have been designed to provide generic and standardized application-level interfaces for the IoT that make it possible, among other things, to achieve such two-way communication. This paper provides a high-level description of QLM messaging standards with a particular focus on this QLM feature, along with proofs-of-concept through real-life implementations in building and automotive domains.

Performance Evaluation and Comparison of Network Firewalls under DDoS Attack

Network firewalls act as the first line of defense against unwanted and malicious traffic and also represent critical point of failure during DDoS attack. Predicting the overall firewall performance is crucial to network security administrators and designers in assessing the strength and effectiveness of network firewalls against DDoS attacks. In this paper, authors have made a humble attempt to study and compare DDoS performance of various types of firewalls in operation as on today. Analysis and detailed comparison is performed on open source packet filter (PF) firewall, Checkpoint SPLAT and Cisco ASA in a testing environment with laboratory generated DDoS traffic. It is attempted to identify various firewall DDoS performance parameters which can be considered during DDoS attack. Further, experiments are carried out to study effect of varying TCP Opening Timers on performance of stateful inspection firewall during Sync Flood attack. Also, in order to improve performance, intelligence is applied in PF firewall rulebase to mitigate DDoS.

Constructive Role of SFC & RGB Fusion versus Destructive Intrusion

Digital Crime is the latest terrorist who can intrude into any domain by breaking any type of firewall or secret code without frittering even a single drop of blood. To fight this terror, a cryptic army was evolved but not good enough to succeed. As a consequence, an effective commando namely steganography has been evolved who can combat any type of destructive intrusion. In this paper, Space Filling Curve (SFC) and RBG colour compound stego action against the threat of digital crime has been proposed. The proposed stego system scans the colour image pixel by pixel along a complex path, not row by row, and hides the variable k bit of the secret data in each pixel visited in the order defined by a Space-Filling Curve (SFC) such as the Hilbert curve and the Moore curve traversing paths. Such curves visit each pixel in the color image which is split into Red, Green and Blue components. The effectiveness of the proposed stego system has been estimated by computing bit error rate (BER), Mean square error(MSE),Peak Signal to Noise Ratio (PSNR) and Mean Structural Similarity index(MSSIM). This paper also illustrates how security has been enhanced using this algorithm.

System insecurity – firewalls

The firewall is normally an intermediate system between the secure internal networks and the less secure external networks. It is intended to keep corporate systems safe from intruders, hackers, and accidental entry into the corporate system. The primary types of firewalls are screening routers, proxy servers, and stateful inspectors. Before choosing a firewall architecture, a company must have the right mind set regarding the threat. The purpose of this paper is to provide an introduction to firewall concepts and help develop this mind set.