State-space reduction in the model of Access Control Lists in IP routers

Authors:
Sandor Palugyai;Mate J. Csorba
Affiliations:
Ericsson Hungary Ltd., Test Competence Center, H-1117 Budapest, Irinyi J. str. 4-20, Hungary.;Ericsson Hungary Ltd., Test Competence Center, H-1117 Budapest, Irinyi J. str. 4-20, Hungary
Venue:
International Journal of Internet Protocol Technology
Year:
2007

Citing 12
Cited 0

Symbolic Boolean manipulation with ordered binary-decision diagrams

ACM Computing Surveys (CSUR)
Working with Cisco access lists

International Journal of Network Management
On the design of IP routers part 1: Router architectures

Journal of Systems Architecture: the EUROMICRO Journal
Cisco IOS access lists

Cisco IOS access lists
Cisco Access Lists Field Guide

Cisco Access Lists Field Guide
Markovian Modeling of Real Data Traffic: Heuristic Phase Type and MAP Fitting of Heavy Tailed and Fractal Like Samples

Performance Evaluation of Complex Systems: Techniques and Tools, Performance 2002, Tutorial Lectures
Performance evaluation of switched ethernet for real-time industrial communications

Computer Standards & Interfaces
Network Security Architectures

Network Security Architectures
A Quantitative Study of Firewall Configuration Errors

Computer
Network traffic behaviour in switched Ethernet systems

Performance Evaluation - Special issue: Distributed systems performance
Theory, Volume 1, Queueing Systems

Theory, Volume 1, Queueing Systems
Modeling access control lists with discrete-time quasi birth-death processes

ISCIS'05 Proceedings of the 20th international conference on Computer and Information Sciences

Quantified Score

Hi-index	0.00

Visualization

Abstract

This document provides an analytic performance model of routers using Access Control Lists (ACLs). For mathematical modelling, a Markovian process, the Discrete-Time Quasi Birth-Death (DQBD) process is used. ACLs in IP routers provide access control and protection for network segments and hosts. The mathematical model of ACLs that also includes input and output interface models is also introduced here, as well as an idea to reduce the state-space of the model, together with the corresponding proof.