Techniques and algorithms for access control list optimization

Authors:
Ibrahim M. Al Abdulmohsin
Affiliations:
Communications Engineering and Technical Support Department, Saudi Aramco, Dhahran 31311, Saudi Arabia
Venue:
Computers and Electrical Engineering
Year:
2009

Citing 3
Cited 1

Cisco: A Beginners Guide

Cisco: A Beginners Guide
A Quantitative Study of Firewall Configuration Errors

Computer
Real-time optimisation of access control lists for efficient Internet packet filtering

Journal of Heuristics

Survey and analysis on Security Requirements Engineering

Computers and Electrical Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

Access control lists are core features of today's internetwork routers. They serve several purposes, most notably in filtering network traffic and securing critical networked resources. However, the addition of access control lists increases packet latency due to the overhead of extra computations involved. This paper presents simple techniques and algorithms for optimizing access control lists that can reduce significantly expected packet latencies without sacrificing security requirements. The emphasis throughout the paper is in providing a modular approach that can be implemented either fully or partially, both online and offline, based on the amount of overhead allowed. It also shows empirically and analytically where and why the greatest potential for optimization lies.