Improving cloud network security using the Tree-Rule firewall

Xiangjian He

doi:10.1016/j.future.2013.06.024

Return

Improving cloud network security using the Tree-Rule firewall

2014-01-01

Xiangjian He

Thawatchai Chomsiri *

Priyadarsi Nanda

Zhiyuan Tan

DOI：10.1016/j.future.2013.06.024

Original

Save

View PDF

Abstract

En 中文

This study proposes a new model of firewall called the 'Tree-Rule Firewall', which offers various benefits and is applicable for large networks such as 'cloud' networks. The recently available firewalls (i.e., Listed-Rule firewalls) have their limitations in performing the tasks and are inapplicable for working on some networks with huge firewall rule sizes. The Listed-Rule firewall is mathematically tested in this paper to prove that the firewall potentially causes conflict rules and redundant rules and hence leads to problematic network security systems and slow functional speed. To overcome these problems, we show the design and development of Tree-Rule firewall that does not create conflict rules and redundant rules. In a Tree-Rule firewall, the rule positioning is based on a tree structure instead of traditional rule listing. To manage firewall rules, we implement a Tree-Rule firewall on the Linux platform and test it on a regular network and under a cloud environment respectively to show its performance. It is demonstrated that the Tree-Rule firewall offers better network security and functional speed than the Listed-Rule firewall. Compared to the Listed-Rule firewall, rules of the Tree-Rule firewall are easier to be created, especially on a large network such as a cloud network. (C) 2013 Elsevier B.V. All rights reserved.

Keywords:

Firewall

Tree-Rule firewall

Network security

Cloud security

Cloud computing

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.