loading...
Towards System-level Optimization for High Performance Unified Threat Management
Athens, Greece June 19-June 25
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICNS.2007.126International Conference on Networkin ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Yaxuan Qi, Tsinghua University, Beijing, China
Baohua Yang, Tsinghua University, Beijing, China
Bo Xu, Tsinghua University, Beijing, China
Jun Li, Tsinghua National Lab for Information Science and Technology, Beijing, China
To build holistic protection against complex and blended network threats, multiple security features need to be integrated into unified security architecture, which requires in a Unified Threat Management (UTM). However, most existing UTMs operate by simply stringing together a number of security applications working independently without system level optimization that streamlines processing flow and leverages shared information and resources to reach high performance. In this paper, a generic framework is proposed to optimize the performance of UTMs at both algorithmic and architectural aspects by exploring the idea of Integrated Protocol Processing (IPP). The algorithm proposed in this paper improves overall protocol processing complexity of ACL and IDS from ?(log(M)+log(N)) to ?(log(M+N)) . Experiments on Intel IXP2850 network processor show that our scheme outperforms existing solutions with 30% increase of throughput.
Citation:
Yaxuan Qi, Baohua Yang, Bo Xu, Jun Li, "Towards System-level Optimization for High Performance Unified Threat Management," icns, pp.7, International Conference on Networking and Services (ICNS '07), 2007
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions