DocumentCode
2639891
Title
Firewall security: policies, testing and performance evaluation
Author
Lyu, Michael R. ; Lau, Lorrien K Y
Author_Institution
Dept. of Comput. Sci. & Eng., Chinese Univ. of Hong Kong, Shatin, China
fYear
2000
fDate
2000
Firstpage
116
Lastpage
121
Abstract
Explores the firewall security and performance relationships for distributed systems. Experiments are conducted to set firewall security into seven different levels and to quantify their performance impacts. These firewall security levels are formulated, designed, implemented and tested, phase by phase, under an experimental environment in which all performed tests are evaluated and compared. Based on the test results, the impacts of the various firewall security levels on system performance with respect to transaction time and latency are measured and analyzed. It is interesting to note that the intuitive belief about security´s relationship to performance, i.e. that more security would result in less performance, does not always hold in firewall testing. The results reveal that a significant impact of enhanced security on performance could only be observed under some particular scenarios, and thus their relationship is not necessarily inversely related. We also discuss the tradeoff between security and performance
Keywords
authorisation; delays; local area networks; performance evaluation; testing; transaction processing; firewall security; firewall testing; latency; performance evaluation; security levels; security policies; security testing; security-performance tradeoff; transaction time; Companies; Computer science; Computer security; Control systems; Internet; Local area networks; Performance evaluation; Performance loss; System performance; System testing;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Software and Applications Conference, 2000. COMPSAC 2000. The 24th Annual International
Conference_Location
Taipei
ISSN
0730-3157
Print_ISBN
0-7695-0792-1
Type
conf
DOI
10.1109/CMPSAC.2000.884700
Filename
884700
Link To Document