Modeling and generating network traffic for stateful firewall performance evaluation

Xiao Hong Liu; Yue Feng Ji

doi:10.1117/12.636687

Translator Disclaimer

5 December 2005 Modeling and generating network traffic for stateful firewall performance evaluation

Xiao Hong Liu, Yue Feng Ji

Author Affiliations +

Proceedings Volume 6022, Network Architectures, Management, and Applications III; 60223Y (2005) https://doi.org/10.1117/12.636687
Event: Asia-Pacific Optical Communications, 2005, Shanghai, China

Abstract

To gain more security in application-layer, current firewalls employ deeper inspection into the application layer, which can impact the customer network due to the additional processing burden, especially during traffic peaks or attacks. To figure out the trade-off between the network security and performance, we present a new method in this paper to generate testing traffic for the stateful firewall evaluation which can both be used to explore the boundary performance of the stateful firewall under certain security level, and characterize a specific customer network to evaluate the performance of the stateful firewall before its implementation to this customer network.

Citation Download Citation

Xiao Hong Liu and Yue Feng Ji "Modeling and generating network traffic for stateful firewall performance evaluation", Proc. SPIE 6022, Network Architectures, Management, and Applications III, 60223Y (5 December 2005); https://doi.org/10.1117/12.636687

ACCESS THE FULL ARTICLE