• DocumentCode
    2639891
  • Title

    Firewall security: policies, testing and performance evaluation

  • Author

    Lyu, Michael R. ; Lau, Lorrien K Y

  • Author_Institution
    Dept. of Comput. Sci. & Eng., Chinese Univ. of Hong Kong, Shatin, China
  • fYear
    2000
  • fDate
    2000
  • Firstpage
    116
  • Lastpage
    121
  • Abstract
    Explores the firewall security and performance relationships for distributed systems. Experiments are conducted to set firewall security into seven different levels and to quantify their performance impacts. These firewall security levels are formulated, designed, implemented and tested, phase by phase, under an experimental environment in which all performed tests are evaluated and compared. Based on the test results, the impacts of the various firewall security levels on system performance with respect to transaction time and latency are measured and analyzed. It is interesting to note that the intuitive belief about security´s relationship to performance, i.e. that more security would result in less performance, does not always hold in firewall testing. The results reveal that a significant impact of enhanced security on performance could only be observed under some particular scenarios, and thus their relationship is not necessarily inversely related. We also discuss the tradeoff between security and performance
  • Keywords
    authorisation; delays; local area networks; performance evaluation; testing; transaction processing; firewall security; firewall testing; latency; performance evaluation; security levels; security policies; security testing; security-performance tradeoff; transaction time; Companies; Computer science; Computer security; Control systems; Internet; Local area networks; Performance evaluation; Performance loss; System performance; System testing;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Computer Software and Applications Conference, 2000. COMPSAC 2000. The 24th Annual International
  • Conference_Location
    Taipei
  • ISSN
    0730-3157
  • Print_ISBN
    0-7695-0792-1
  • Type

    conf

  • DOI
    10.1109/CMPSAC.2000.884700
  • Filename
    884700