The Fire Wall Based on Linux

Xiaorong Gao

2003-01-01

Abstract:With the constant development of the application of computer network, the network security is more and more important. This paper discusses the key techniques of network security and shows how to build a firewall based on Linux. Besides, it gives prospects for the development of future firewall.

What problem does this paper attempt to address?

A Reference Model And System Architecture For Database Firewall

L Cai,Xh Yang

DOI: https://doi.org/10.1109/ICSMC.2005.1571196

2005-01-01

Abstract:More and more network attacks are focusing on application level vulnerabilities. Recently, several examples of this trend have been highly publicized such as the SQL Slammer and SQL Snake attacks. Traditional firewalls, used for protecting the database, only prevent attacks searching for vulnerabilities. Database firewalls take defense deep into the organization by providing full syntax control and audit of the SQL AN stream before it reaches the database, and enforcing content-driven access to database. This paper proposes a layered reference model for database firewalls by enhancing the capability of COAST Laboratory's model. It separates a database firewall into three layers (network layer, schematic layer and semantic layer) according to the knowledge, computation target, and the control granularity of each layer. Based on this model, a database firewall product had been prototyped It can greatly improve the database security by introducing self-controlled authentication principal mapping, object mapping, and mandatory access control modules.
Internet Firewall and its Linux Implementation

Huafeng Lü,Qiufeng Wu

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.08.015

2001-01-01

Abstract:This paper explains the basic theory of the Interbet firewall technology,introduces the architectures of several kinds of firewall,and gives out some firewall softwares under Linux operating system and their applications.
The research of firewall technology in computer network security

Wei Chen,Yantao Wang,Xin Yue

DOI: https://doi.org/10.1109/PACIIA.2009.5406566

2009-11-01

Abstract:This paper analyzes the computer network security features and the main threat, synthesis the firewall technology of current domestic and international, on the basis of various firewalls' principles, advantages and shortcomings. Through the synthesis and compare of various techniques, in-depth study of the main factors affection firewall performance, combined with the network status quo of Heilongjiang Provincial Center, this paper researches the firewall technology of the actual application in the computer network security, then refers the new technique called tight coupling firewall, finally the article leads to a lack of firewall technology and the direction of its development.

Computer Science
Firewall Network Security Research

Chen Liang

Abstract:Text information on the content of network security and the fundamental changes, expounding China's development of national information security system and the importance of the establishment of China's network security system with the need. On the network firewall security technology and the classification of the main technical characteristi.

Engineering,Computer Science
Research on Computer Network Security Based on Firewall Technology

Xinzhou He

DOI: https://doi.org/10.1088/1742-6596/1744/4/042037

2021-02-01

Journal of Physics: Conference Series

Abstract:Abstract In the era of rapid network development. Its security has attracted much attention. In order to improve the security of computer network. Firewall as one of the most effective technologies. His development has also attracted people’s attention. This article will further analyse firewall technology. I hope you can get some inspiration from it.
Design and Implementation of Enterprise Network Security System Based on Firewall

Hui Yuan,Lei Zheng,Shuang Qiu,Xiangli Peng,Yuan Liang,Yaodong Hu,Guoru Deng

DOI: https://doi.org/10.1007/978-3-030-15235-2_142

2019-04-25

Abstract:With the rapid development of the network, in recent years, the Internet has greatly improved people’s lives, and the real-time, sharing and distance-removing characteristics of network information transmission have made the operation and management of enterprises more efficient and coordinated. The basis of refinement. At the same time, various network security incidents have followed, such as hacker attacks on computer network systems, and various types of viruses, Trojans and other active attacks emerge one after another. In this regard, this paper analyzes the enterprise network security system of firewall from the perspective of enterprise network security, briefly summarizes the background, advantages and disadvantages of firewall technology, and designs and implements a client software according to the actual needs of users. The network performs real-time intelligent security monitoring. After the system design is completed, the security is tested by building a simulation platform, including qualitative testing and quantitative testing, which are divided into security and performance to verify whether the system can achieve and guarantee performance.
Design for Firewall Integrating with Intrusion Detection

Jian Xie

2004-01-01

Abstract:It is hard for single- functioned secure products to meet the current demand,and the trend begin to change towards Integration.A frame of firewall based on Linux is discussed as to improve the ability of security control.
Firewall Technology in Computer Network Security in 5G Environment

Xinghua Song

DOI: https://doi.org/10.1088/1742-6596/1544/1/012090

2020-05-01

Journal of Physics: Conference Series

Abstract:Abstract in the Process of Computer Network Security Maintenance, Firewall Technology is the Main Security Maintenance Approach and Can Play an Effective Protection Role. Due to the Popularity and Widespread Use of Computer Technology, Network Security Has Received Widespread Attention from All Walks of Life. the Purpose of This Article is to Study Firewall Technology in Computer Network Security Based on 5G Environment. 5G Mobile Networks Also Have Some Shortcomings, Such as Weak Network Penetration Capabilities. Once the Base Station is Not Fully Deployed, There Will Be Gaps in the Borders of Communication Cells, Resulting in Network Data Transmission Interruption. in Order to Solve the Above Problems, This Paper Proposes Mobile Network Optimization Measures. Based on Many Years of Practice and Exploration, It Focuses on Describing the Complex Communication Application Scenarios in Cities, and Introduces a Variety of Mobile Network Optimization Technologies to Achieve Seamless Network Coverage and Ensure That People Can Use Mobile Communication Networks Normally. the High-Speed, Large-Capacity, Low-Latency, and High-Reliability Services Brought by 5G Will Have an Impact on the Local Optical Cable Architecture and Core Utilization. According to the Experimental Results, the Effective Application of Firewall Technology Can Greatly Improve the Security of Computer Networks and Ensure the Security of Computer Networks to a Great Extent.
On the Relationship between Computer Firewall Technology and Network Security

Lan Jiang

DOI: https://doi.org/10.1088/1742-6596/1744/3/032137

2021-02-01

Journal of Physics: Conference Series

Abstract:Abstract The rapid development of The Internet brings convenience to people, but also brings some problems to people. The danger of information pollution and destruction is becoming more and more serious, in order to reduce the loss of confidence and security to people. People have studied firewall technology. The use of firewall technology provides a reliable guarantee for protecting the security of data and resources. This paper mainly discusses the application of firewall technology in computer network security from the aspects of network security, the general situation and types of firewall [1] .
On the Implementation of a Firewall Based on Linux Platform

范训礼,景广军

DOI: https://doi.org/10.3969/j.issn.1000-2758.2002.03.011

2002-01-01

Xibei Gongye Daxue Xuebao/Journal of Northwestern Polytechnical University

Abstract:This paper presents a firewall system based on Linux - L-Firewall, which combines packet filter and proxy technology. Proxy and authentication are implemented on B1 level operating system. The paper emphasizes on the L-Firewall frame, especially on the implementation of packet filter module. L-Firewall provides not only HTTP, FTP proxy and packet filter, but also content filter, network address translation to protect network from IP spoofing and IP source route spoofing. L-Firewall tallies with GB/T17900-1999 and GB/T18020-1999.
Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Qiumei Cheng,Chunming Wu,Haifeng Zhou,Yuhang Zhang,Rui Wang,Wei Ruan

DOI: https://doi.org/10.1109/hpcc/smartcity/dss.2018.00149

2018-01-01

Abstract:Guarding the perimeter of cloud-based enterprise networks is a challenge due to massive traffic with dynamic nature. Current firewalls of enterprise networks in cloud are largely based on static security rule configuration or simple rule matching, which makes them inflexible, error-prone and poorly effective, bringing about severe security risks. In this paper, we propose an artificial intelligence-based software-defined networks firewall (AI-SDNF) for solving the above problems. Compared with existing SDN firewalls, AI-SDNF is able to extract and analyze the payload of data packets based on machine learning technologies rather than simply match with flow tables according to several header fields (e.g., source and destination IP/MAC addresses). Considering deciding whether a packet is benign or malicious is able to be formulated as a typical binary classification problem, we employ logistic regression for training an intelligent SDN firewall under supervised machine learning. We implement a prototype of AI-SDNF on the OpenDaylight controller and the OpenStack platform. Based on the prototype, we evaluate its performance and overheads with real dataset. The experimental results indicate that AI-SDNF achieves a relatively high detection accuracy of 96.79% with an average of 0.2ms latency.
Analysis and Exploration of Related Issues on the Computer Network Security Based on Firewall and Anti-Virus Software

Wu Peng

DOI: https://doi.org/10.1007/978-3-642-25437-6_7

2012-01-01

Abstract:In the computer network security protection, we often use the anti-virus software and firewalls, but both of the computer network security features and functions are different, and each of them has its own characteristics and expertise. This paper makes some research and analysis of a number of issues about network security based on anti-virus software and firewall technology.
The Research on Associated Application of GAP and Firewall

Rui MAO,Guang-hua CHEN,Fa-guang ZOU

2013-01-01

Abstract:This paper studied the associated application of GAP and firewall, which can prevent unauthorized access better and improve the security of the computer network, in the process of data exchange between LAN and Internet.
Research And Design Of Nids Based On Linux Firewall

Jia Zongpu,Liu Shufen,Wang Guowei

DOI: https://doi.org/10.1109/SPCA.2006.297482

2006-01-01

Abstract:Firewall has many shortages, such as it cannot keep away interior attacks, it cannot provide a consistent security strategy, and it has a single bottleneck spot and invalid spot, etc. Intrusion Detection System (IDS) also has many defects, such as low detection ability, lack of effective response mechanism, poor manageability, etc. If firewall and IDS are integrated, the cooperation of them can implement the network security to a great extent: on the one hand, IDS monitors the network, provides a real-time detection of attacks from the interior and exterior, and automatically informs firewall and dynamically alters the rules of firewall once an attack is found; on the other hand, firewall loads dynamic rules to hold up the intrusion, controls the data traffic of IDS and provides the security protection of IDS. Based on constructing firewall with Iptables in the environment of Linux OS, the respective characters of firewall and IDS are analyzed. Then, the viewpoint of integrating firewall and IDS to realize the network security is proposed, and the application and algorithm of intrusion detection are systemically analyzed and designed.
PRINCIPLE AND IMPLEMENTATION OF FIREWALL MECHANISM IN LINUX KERNEL

徐辉,潘爱民,阳振坤

2002-01-01

Abstract:This paper elaborates on the firewall mechanism in Linux 2.2 kernel, named IPchains, and gives the analysis of its scheme and implementation. The concept of dynamic Network Address Translating and IP masquerade in Linux are also discussed. A brief introduction is given to the firewall in the new 2.4 Linux kernel at the end of this paper.
Network Security Technology in Intelligent Building Automation System

Yang Xin-hu

Abstract:Through analyzing the network safety problems in intelligent building automation system of coal industrial enterprise,this paper examines how to effectively utilize the network security technology in its automation system from the aspects of the functional features of intelligent buildings,the development of computer network technology and its existing safety problems,as well as the vital role firewall plays in network security system.

Computer Science,Environmental Science,Engineering
Firewall Fingerprinting and Denial of Firewalling Attacks.

Alex X. Liu,Amir R. Khakpour,Joshua W. Hulst,Zihui Ge,Dan Pei,Jia Wang

DOI: https://doi.org/10.1109/TIFS.2017.2668602

2017-01-01

Abstract:Firewalls are critical security devices handling all traffic in and out of a network. Firewalls, like other software and hardware network devices, have vulnerabilities, which can be exploited by motivated attackers. However, just like any other networking and computing devices, firewalls often have vulnerabilities that can be exploited by attackers. In this paper, first, we investigate some possible firewall fingerprinting methods and surprisingly found that these methods can achieve quite high accuracy. Second, we study what we call denial of firewalling (DoF) attacks, where attackers use carefully crafted traffic to effectively overload a firewall. To the best of our knowledge, this paper represents the first study of firewall fingerprinting and DoF attacks.
EXAMINATION OF MODERN CONCEPTS FOR FIREWALLS AND COLLABORATIVE INTRUSION DETECTION

Andriy Luntovskyy,Mykhailo Klymash

DOI: https://doi.org/10.20535/2411-2976.22017.44-48

2017-12-28

Information and Telecommunication Sciences

Abstract:Background. Modern firewall systems are compared to classical concepts. The filtering rules are analyzed on the examples of the leading solutions (presented by Gartner Inc.). The collaborative intrusion detection systems and networks as well as the threats based on the insider attacks on CIDN are examined. A common CIDN functionality catalogue is discussed. The aspects of the application of modern systems of network intrusion detection and prevention by the peculiarities of their implementation at different levels are considered in accordance with the model of ISO/OSI. Brief recommendations on the use of known network security solutions in the construction of modern infocommunication networks to overcome various types of threats, in particular DoS type, virus and social engineering, are given. Objective. The aim of the paper is to study the implementation and application of modern concepts of firewalls and collaborative network intrusion detection systems. Methods. The research was carried out based on analysis of a large number of literary sources, the theory of building information security systems and avenues of manufacturers of systems for detecting and preventing network intrusion. Results. The advanced firewalls like SMLIF, IPS, the collaborative intrusion detection systems gain in importance increasingly nowadays. They can be also deployed within the scenarios of NFC and IoT (Internet of Things). The FW and IDS are often combined into individual participating peers (LAN, WLAN, 2G-4G, NFC and Bluetooth) with possibility of collaboration and better prevention of both external and insider attacks. Conclusions. The conducted research indicates the need to improve the implementation of modern network architecture with the use of integrated systems for detecting and counteracting network attacks. Despite the wide variety of network security solutions, this area of research remains relevant and suggests that the development of new concepts for protecting network architectures meets the current state of the industry, is timely and relevant, given the wide range of capabilities and scenarios for malicious intrusions and network system impacts. Keywords: firewall; network attacks; intrusion detection systems; intrusion prevention systems; CIDN.
Firewall fingerprinting

Amir R. Khakpour,Joshua W. Hulst,Zihui Ge,Alex X. Liu,Dan Pei,Jia Wang

DOI: https://doi.org/10.1109/INFCOM.2012.6195544

2012-01-01

Abstract:Firewalls are critical security devices handling all traffic in and out of a network. Firewalls, like other software and hardware network devices, have vulnerabilities, which can be exploited by motivated attackers. However, because firewalls are usually placed in the network such that they are transparent to the end users, it is very hard to identify them and use their corresponding vulnerabilities to attack them. In this paper, we study firewall fingerprinting, in which one can use firewall decisions on TCP packets with unusual flags and machine learning techniques for inferring firewall implementation.
A Formal Approach To Firewalls Testing Techniques

Alexander Barabanov,Alexey Markov,Valentin Tsirlov

DOI: https://doi.org/10.48550/arXiv.1306.1953

2013-06-08

Cryptography and Security

Abstract:Traditional technologies of firewall testing are overlooked. A new formalized approach is presented. Recommendations on optimization of test procedures are given.

The Fire Wall Based on Linux

A Reference Model And System Architecture For Database Firewall

Internet Firewall and its Linux Implementation

The research of firewall technology in computer network security

Firewall Network Security Research

Research on Computer Network Security Based on Firewall Technology

Design and Implementation of Enterprise Network Security System Based on Firewall

Design for Firewall Integrating with Intrusion Detection

Firewall Technology in Computer Network Security in 5G Environment

On the Relationship between Computer Firewall Technology and Network Security

On the Implementation of a Firewall Based on Linux Platform

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

Analysis and Exploration of Related Issues on the Computer Network Security Based on Firewall and Anti-Virus Software

The Research on Associated Application of GAP and Firewall

Research And Design Of Nids Based On Linux Firewall

PRINCIPLE AND IMPLEMENTATION OF FIREWALL MECHANISM IN LINUX KERNEL

Network Security Technology in Intelligent Building Automation System

Firewall Fingerprinting and Denial of Firewalling Attacks.

EXAMINATION OF MODERN CONCEPTS FOR FIREWALLS AND COLLABORATIVE INTRUSION DETECTION

Firewall fingerprinting

A Formal Approach To Firewalls Testing Techniques