Analysis of Performance and Efficiency of Hardware and Software Firewalls

• Autorzy: Konikiewicz W. , Markowski M.

Identyfikatory

DOI

10.1515/jacsm-2017-0003

• Języki publikacji: EN

Abstrakty

EN

Firewalls are key elements of network security infrastructure. They should guarantee the proper level of security and, at the same time, the satisfying performance in order to not increase the packet delay in the network. In the paper, we present the comparative study on performance and security of a few firewall technologies including hardware, software and virtual solutions. Three important criteria are considered: the maximal throughput of firewall, the introduced delay and the ability to resist Denial of Service attacks. We report results of experiments, present analysis and formulate a few practical conclusions.

Słowa kluczowe

EN

firewall; virtual firewall; network security; network performance; DoS attacks

• Wydawca: Społeczna Akademia Nauk w Łodzi
• Czasopismo: Journal of Applied Computer Science Methods
• Rocznik: 2017
• Tom: Vol. 9 No. 1
• Strony: 49--63
• Opis fizyczny: Bibliogr. 20 poz., rys.

Twórcy

autor

Konikiewicz W.

• Wroclaw University of Science and Technology, Wybrzeze Wyspianskiego 27, 50-370 Wroclaw, Poland

autor

Markowski M.

• Department of Systems and Computer Networks, Wroclaw University of Science and Technology, Wybrzeze Wyspianskiego 27, 50-370 Wroclaw, Poland

Bibliografia

• 1. Ramaswamy Chandramouli, 2016, Secure Virtual Network Configuration for Virtual Machine (VM) Protection, NIST Special Publication 800-125B.
• 2. Wankhade A., Chatur P.N., 2014, Comparison of Firewall and Intrusion Detection System, International Journal of Computer Science and Information Technologies, Vol. 5 (1), pp. 674-678.
• 3. C. Sheth, R. Thakker, 2013, Performance Evaluation and Comparison of Network Firewalls under DDoS Attack, Computer Network and Information Security, Vol. 12, pp. 60-6.7
• 4. T. Höfler, C. Burkert and M. Telzer, 2004, "Comparative Firewall Study," Chemnitz Univeristy of Technology, Chemnitz.
• 5. Panchal R., 2005, Firewalls: Hardware vs. Software, SE 4C03.
• 6. Krajnik B., 2004, Firewalls with Filtering in Application Layer and Quality of Services, Engineer Diploma Thesis, Warsaw University of Technology.
• 7. Gouri Shankar Prajapati, Nilay Khare, 2015, A Comparative Study of Software Firewall on Windows and Linux Platform, International Journal of Computer and Technology, Vol. 14(8), pp. 5967-5978.
• 8. S. Patton, D. Doss and W. Yurcik, 2000, Open source versus commercial firewalls: functional comparison, Proceedings 25th Annual IEEE Conference on Local Computer Networks. LCN 2000, Tampa, FL, pp. 223-224.
• 9. C. Sheth and R. Thakker, 2011, Performance Evaluation and Comparative Analysis of Network Firewalls, 2011 International Conference on Devices and Communications (ICDeCom), Mesra, pp. 1-5.
• 10. Y. Yongxin, 2011, The comparative study on network firewalls performance, 2011 IEEE 3rd International Conference on Communication Software and Networks, Xi'an, pp. 427-430.
• 11. Shinder T.W., Shimonski R.J., Shinder D.L., 2003, The Best Damn Firewall Book Period” Syngress Publishing, Rockland.
• 12. Decusatis C., Mueller P., 2014, Virtual Firewall Performance as a Waypoint on a Software Defined Overlay Network, 2014 IEEE Intl Conf on High Performance Computing and Communications, 2014 IEEE 6th Intl Symp on Cyberspace Safety and Security, 2014 IEEE 11th Intl Conf on Embedded Software and Systems (HPCC,CSS,ICESS), Paris, pp. 819-822.
• 13. Comer D.E., 2012, Computer networks and Internets, Helion, Gliwice.
• 14. Krysiak K., 2005,. Sieci komputerowe. Kompendium. Helion, Gliwice.
• 15. NetScreen Technologies Inc., Juniper Netscreen Instaler’s Guide, Version 4.
• 16. Gałęzowski G., 2010, Cisco ASA 5505 Podstawy konfiguracji, HAKING, Vol. 12/2010.
• 17. wiki.vyos.net
• 18. linux.die.net
• 19. iperf.fr/
• 20. blackmoreops.com, Denial-of-service Attack – DoS using hping3 with spoofed IP in Kali Linux, 2015.