New upper bounds in Klee's measure problem
SIAM Journal on Computing
Optimal on-line decremental connectivity in trees
Information Processing Letters
Optimal bounds for the predecessor problem
STOC '99 Proceedings of the thirty-first annual ACM symposium on Theory of computing
Multi-method dispatching: a geometric approach with applications to string matching problems
STOC '99 Proceedings of the thirty-first annual ACM symposium on Theory of computing
Applications of Path Compression on Balanced Trees
Journal of the ACM (JACM)
Router plugins: a software architecture for next-generation routers
IEEE/ACM Transactions on Networking (TON)
Multidimensional binary search trees used for associative searching
Communications of the ACM
The Design and Analysis of Computer Algorithms
The Design and Analysis of Computer Algorithms
Sorting and Searching using Ternary CAMs
IEEE Micro
Time and Space Efficient Multi-method Dispatching
SWAT '02 Proceedings of the 8th Scandinavian Workshop on Algorithm Theory
New Algorithms for Subset Query, Partial Match, Orthogonal Range Searching, and Related Problems
ICALP '02 Proceedings of the 29th International Colloquium on Automata, Languages and Programming
Range Searching in Categorical Data: Colored Range Searching on Grid
ESA '02 Proceedings of the 10th Annual European Symposium on Algorithms
Fast and scalable conflict detection for packet classifiers
Computer Networks: The International Journal of Computer and Telecommunications Networking
Fast prefix matching of bounded strings
Journal of Experimental Algorithmics (JEA)
Algorithmic foundations of the internet
ACM SIGACT News
Conflict detection and resolution in two-dimensional prefix router tables
IEEE/ACM Transactions on Networking (TON)
Effects of processing delay on function-parallel firewalls
PDCN'06 Proceedings of the 24th IASTED international conference on Parallel and distributed computing and networks
Computer Networks: The International Journal of Computer and Telecommunications Networking
Efficient IP table lookup via adaptive stratified trees with selective reconstructions
Journal of Experimental Algorithmics (JEA)
O(logW) multidimensional packet classification
IEEE/ACM Transactions on Networking (TON)
ProgME: towards programmable network measurement
Proceedings of the 2007 conference on Applications, technologies, architectures, and protocols for computer communications
Compressing rectilinear pictures and minimizing access control lists
SODA '07 Proceedings of the eighteenth annual ACM-SIAM symposium on Discrete algorithms
High-Speed Dynamic Packet Filtering
Journal of Network and Systems Management
Formal correctness of conflict detection for firewalls
Proceedings of the 2007 ACM workshop on Formal methods in security engineering
PolicyVis: firewall security policy visualization and inspection
LISA'07 Proceedings of the 21st conference on Large Installation System Administration Conference
An inference system for detecting firewall filtering rules anomalies
Proceedings of the 2008 ACM symposium on Applied computing
A (slightly) faster algorithm for klee's measure problem
Proceedings of the twenty-fourth annual symposium on Computational geometry
Fast, cheap, and in control: a step towards pain free security!
LISA'08 Proceedings of the 22nd conference on Large installation system administration conference
A (slightly) faster algorithm for Klee's measure problem
Computational Geometry: Theory and Applications
Firewall policy verification and troubleshooting
Computer Networks: The International Journal of Computer and Telecommunications Networking
A formal logic approach to firewall packet filtering analysis and generation
Artificial Intelligence Review
Analysis of firewall policy rules using traffic mining techniques
International Journal of Internet Protocol Technology
ProgME: towards programmable network measurement
IEEE/ACM Transactions on Networking (TON)
A novel three-tiered visualization approach for firewall rule validation
Journal of Visual Languages and Computing
Unifying the Landscape of Cell-Probe Lower Bounds
SIAM Journal on Computing
Journal of Systems and Software
Detection and resolution of anomalies in firewall policy rules
DBSEC'06 Proceedings of the 20th IFIP WG 11.3 working conference on Data and Applications Security
Firewall policy change-impact analysis
ACM Transactions on Internet Technology (TOIT)
Persistent predecessor search and orthogonal point location on the word RAM
Proceedings of the twenty-second annual ACM-SIAM symposium on Discrete Algorithms
OPODIS'04 Proceedings of the 8th international conference on Principles of Distributed Systems
Collaborations, mergers, acquisitions, and security policy conflict analysis
Proceedings of the Seventh Annual Workshop on Cyber Security and Information Intelligence Research
Change-impact analysis of firewall policies
ESORICS'07 Proceedings of the 12th European conference on Research in Computer Security
A visualized internet firewall rule validation system
APNOMS'07 Proceedings of the 10th Asia-Pacific conference on Network Operations and Management Symposium: managing next generation networks and services
Persistent Predecessor Search and Orthogonal Point Location on the Word RAM
ACM Transactions on Algorithms (TALG) - Special Issue on SODA'11
| Hi-index | 0.01 |
We consider rule sets for internet packet routing and filtering, where each rule consists of a range of source addresses, a range of destination addresses, a priority, and an action. A given packet should be handled by the action from the maximum priority rule that matches its source and destination. We describe new data structures for quickly finding the rule matching an incoming packet, in near-linear space, and a new algorithm for determining whether a rule set contains any conflicts, in time &Ogr;(n3/2).