TY - GEN
T1 - An experimental study on firewall performance
T2 - 2014 10th International Conference on Information Assurance and Security, IAS 2014
AU - Wang, Chenghong
AU - Zhang, Donghong
AU - Lu, Hualin
AU - Zhao, Jing
AU - Zhang, Zhenyu
AU - Zheng, Zheng
N1 - Publisher Copyright:
© 2014 IEEE.
PY - 2014/3/19
Y1 - 2014/3/19
N2 - Performance is an important indicator of firewalls effectiveness, which represents capability of firewalls handling network requests. ModSecurity and iptables, two representative firewalls of packet filtering and application firewall, are studied experimentally in this paper. Firstly, we develop the experiments to test the capacity of these two kinds of firewalls. Secondly, we locate the bottlenecks for system resources such as CPU and memory usage that affect the firewalls performance by analyzing the collecting data from firewalls experiments. Finally, with the same settings, we compare the performance of the two kinds of firewalls by varying the parameters such as request rate, packet length, and maximum concurrent connections.
AB - Performance is an important indicator of firewalls effectiveness, which represents capability of firewalls handling network requests. ModSecurity and iptables, two representative firewalls of packet filtering and application firewall, are studied experimentally in this paper. Firstly, we develop the experiments to test the capacity of these two kinds of firewalls. Secondly, we locate the bottlenecks for system resources such as CPU and memory usage that affect the firewalls performance by analyzing the collecting data from firewalls experiments. Finally, with the same settings, we compare the performance of the two kinds of firewalls by varying the parameters such as request rate, packet length, and maximum concurrent connections.
KW - application firewall
KW - hardware resources
KW - network security
KW - packet filtering firewall
KW - performance bottleneck
UR - https://www.scopus.com/pages/publications/84983200546
U2 - 10.1109/ISIAS.2014.7064623
DO - 10.1109/ISIAS.2014.7064623
M3 - 会议稿件
AN - SCOPUS:84983200546
T3 - 2014 10th International Conference on Information Assurance and Security, IAS 2014
SP - 71
EP - 76
BT - 2014 10th International Conference on Information Assurance and Security, IAS 2014
PB - Institute of Electrical and Electronics Engineers Inc.
Y2 - 28 November 2014 through 30 November 2014
ER -