Relevant bibliographies by topics / Firewall Model / Journal articles
To see the other types of publications on this topic, follow the link: Firewall Model.

Journal articles on the topic 'Firewall Model'

Author: Grafiati
Published: 6 September 2023
Last updated: 31 July 2025

Create a spot-on reference in APA, MLA, Chicago, Harvard, and other styles

Select a source type:

Consult the top 50 journal articles for your research on the topic 'Firewall Model.'

Next to every source in the list of references, there is an 'Add to bibliography' button. Press on it, and we will generate automatically the bibliographic reference to the chosen work in the citation style you need: APA, MLA, Harvard, Chicago, Vancouver, etc.

You can also download the full text of the academic publication as pdf and read online its abstract whenever available in the metadata.

Browse journal articles on a wide variety of disciplines and organise your bibliography correctly.

1

Hakani, Dhwani, and Palvinder Singh Mann. "Memory management of firewall filtering rules using modified tree rule approach." International Journal of Informatics and Communication Technology (IJ-ICT) 14, no. 1 (2025): 141. https://doi.org/10.11591/ijict.v14i1.pp141-152.

Full text
Abstract:
<p>Firewalls are essential for safety and are used for protecting a great deal of private networks. A firewall’s goal is to examine every incoming and outgoing data before granting access. A notable kind of conventional firewall is the rule-based firewall. However, when it comes to job performance, traditional listed-rule firewalls are limited, and they become useless when utilized with some networks that have extremely big firewall rule sets. This study proposes a model firewall architecture called “TreeRule Firewall,” which has benefits and functions effectively in large-scale networks
APA, Harvard, Vancouver, ISO, and other styles
2

Dhwani, Hakani, and Singh Mann Palvinder. "Memory management of firewall filtering rules using modified tree rule approach." International Journal of Informatics and Communication Technology 14, no. 1 (2025): 141–52. https://doi.org/10.11591/ijict.v14i1.pp141-152.

Full text
Abstract:
Firewalls are essential for safety and are used for protecting a great deal of private networks. A firewall’s goal is to examine every incoming and outgoing data before granting access. A notable kind of conventional firewall is the rule-based firewall. However, when it comes to job performance, traditional listed-rule firewalls are limited, and they become useless when utilized with some networks that have extremely big firewall rule sets. This study proposes a model firewall architecture called “TreeRule Firewall,” which has benefits and functions effectively in large-scale
APA, Harvard, Vancouver, ISO, and other styles
3

Manisha, Patil, and Mohurle Savita. "The Empirical Study of the Evolution of the Next Generation Firewalls." International Journal of Trend in Scientific Research and Development 1, no. 5 (2017): 193–96. https://doi.org/10.31142/ijtsrd2259.

Full text
Abstract:
Even after the adoption of network security policies and practices, unauthorized intrusion occurs. It is an attack in which attacker gets access to the system by means of different hacking and cracking techniques. Firewall is hardware software based network security system that uses rules to control incoming and outgoing network packet. A firewall controls access to the resources of a network through a positive control model. There are various traditional firewalls like Packet Filters, Application level Gateways and Circuit level Gateways which has certain pros and cons. To overcome disadvanta
APA, Harvard, Vancouver, ISO, and other styles
4

Terentyev, Alexander, Yevhenii Gorbatyuk, Tamara Lyashchenko, and Oleh Kuzminskyi. "NEW GENERATION FIREWORKS: A STUDY OF THE HISTORY OF DEVELOPMENT." Management of Development of Complex Systems, no. 45 (March 1, 2021): 102–6. http://dx.doi.org/10.32347/2412-9933.2021.45.102-106.

Full text
Abstract:
Attempts at unauthorized intrusion occur quite often, even after the adoption of the necessary security policies and practices for the information network. These are attacks in which an attacker gains access to the system using various hacking techniques. A firewall is a hardware and software-based network security system that uses certain rules to manage incoming and outgoing network packets. The firewall controls access to network resources through a positive management model. There are various traditional firewalls, such as packet filters, program-level gateways, and chip-level gateways, wh
APA, Harvard, Vancouver, ISO, and other styles
5

Anggit, Anggit, Yoga Pristyanto, Beti Wulansari, and Dian Prasetya. "Critical Feature Selection Technique for Improving Performance Classification Model in Adaptive Intrusion Detection System." Journal of Cybersecurity and Information Management 16, no. 1 (2025): 15–24. https://doi.org/10.54216/jcim.160102.

Full text
Abstract:
A firewall is one of the devices that supports network security, especially at the organizational level. A Firewall's effectiveness in supporting network security is highly dependent on the capabilities and abilities of the Network Administrator. Unfortunately, the high complexity of creating rules and the process of configuring Firewall rules carried out statically by the Network Administrator weakens the effectiveness of the Firewall, and it cannot adapt to increasingly dynamic network pattern changes. Machine Learning is one of the potentials that can be used so that the Firewall can work a
APA, Harvard, Vancouver, ISO, and other styles
6

Khummanee, Suchart, Phatthanaphong Chomphuwiset, and Potchara Pruksasri. "DSSF: Decision Support System to Detect and Solve Firewall Rule Anomalies based on a Probability Approach." ECTI Transactions on Computer and Information Technology (ECTI-CIT) 16, no. 1 (2022): 56–73. http://dx.doi.org/10.37936/ecti-cit.2022161.246996.

Full text
Abstract:
Currently, establishing a private network on the Internet is highly hazardous for attacks as attackers continuously scan computers for vulnerabilities within the connected network. The firewall ranked the highest as a network device is selected to protect unauthorized accesses and attacks. However, firewalls can effectively protect against assaults based on adequately defined rules without any anomalies. In order to resolve anomaly problems and assist firewall admins with the ability to manage the rules effectively, in this paper, a prototype of the decision support system has been designed an
APA, Harvard, Vancouver, ISO, and other styles
7

Buqing, Wang. "Analysis of a new firewall constructed on Pfsense with Snort to defend against common internet intrusions." Applied and Computational Engineering 43, no. 1 (2024): 244–50. http://dx.doi.org/10.54254/2755-2721/43/20230841.

Full text
Abstract:
This paper aims to design a new firewall based on the detection of common forms of network attacks in the current Internet environment using Snort in combination with the Pfsense network security platform. Firstly, the functions of Snort and Pfsense are introduced, and the shortcomings of traditional firewalls in the current network environment are analyzed. Then analyze the common port scanning attacks, DOS attacks and algorithm complexity attacks, and by means of reviewing the literature, demonstrate that it adopts the network proxy, CNN-BiLSTM intrusion detection model, IBM algorithm, VLDC
APA, Harvard, Vancouver, ISO, and other styles
8

Syrotynskyi, R. M., and I. Y. Tyshyk. "FEATURES OF NETWORK ACCESS MANAGEMENT OF CORPORATE SYSTEMS IN ZERO TRUST ARCHITECTURE." Computer systems and network 7, no. 1 (2025): 261–71. https://doi.org/10.23939/csn2025.01.261.

Full text
Abstract:
The fundamental principles of zero trust are examined, and the challenges of adhering to them are analyzed when deploying a network infrastructure using classical security model approaches. Relying on traditional methods for writing firewall rules does not allow for flexible regulation of access to corporate systems within the network or for maintaining the principle of least privilege. Moreover, the need for continuous verification and authentication of nodes before granting network access raises the issue of integrating application processes into the network interaction between the host and
APA, Harvard, Vancouver, ISO, and other styles
9

Madhloom, Jamal Khudair, Zainab Hammoodi Noori, Sif K. Ebis, Oday A. Hassen, and Saad M. Darwish. "An Information Security Engineering Framework for Modeling Packet Filtering Firewall Using Neutrosophic Petri Nets." Computers 12, no. 10 (2023): 202. http://dx.doi.org/10.3390/computers12100202.

Full text
Abstract:
Due to the Internet’s explosive growth, network security is now a major concern; as a result, tracking network traffic is essential for a variety of uses, including improving system efficiency, fixing bugs in the network, and keeping sensitive data secure. Firewalls are a crucial component of enterprise-wide security architectures because they protect individual networks from intrusion. The efficiency of a firewall can be negatively impacted by issues with its design, configuration, monitoring, and administration. Recent firewall security methods do not have the rigor to manage the vagueness t
APA, Harvard, Vancouver, ISO, and other styles
10

Jha, Ashutosh Chandra. "Automated Firewall Policy Generation with Reinforcement Learning." International journal of IoT 5, no. 1 (2025): 190–211. https://doi.org/10.55640/ijiot-05-01-10.

Full text
Abstract:
Network security would be incomplete without firewalls that control traffic flow through rule-based policies. The manual way to configure and manage firewall rules, however, is prone to various pitfalls; rules tend to become overly complex, human error occurs, and cyber threats continue to evolve. This work investigates the reinforcement learning (RL) - driven method for firewall policy generation, utilizing RL as an automated means for policy generation to increase adaptability and reduce administrative overhead. The proposed system utilizes RL agents that learn an optimal policy from real-ti
APA, Harvard, Vancouver, ISO, and other styles
11

Silaban, Mei Erpina Sari, Ika Kurniawati, Muhammad Rizki Fahdia, and Abdul Rahman Kadafi. "ANALISA KELAYAKAN SISTEM KEAMANAN FIREWALL SOPHOS DENGAN METODE TECHNOLOGY ACCEPTENCE MODEL PADA PT. TERRADATA COMPUTINDO." INFOTECH journal 9, no. 2 (2023): 675–82. http://dx.doi.org/10.31949/infotech.v9i2.7787.

Full text
Abstract:
ABSTRACT
 Terradata Computindo is a company that has used a network security system, namely Firewall with the Sophos brand for communication security and network security on each computer. With the use of Firewall Sophos at PT. Terradata Computindo can reduce malware attacks and guarantee data security. This study was conducted to analyze the feasibility of the security system used by the company, namely the Sophos Firewall, based on user perceptions with the variables of Sophos Firewall Usefulness (X) and Attitudes towards the use of Sophos Firewall (Y) using the TAM method. The TAM (Tec
APA, Harvard, Vancouver, ISO, and other styles
12

Xuan, Shichang, Dapeng Man, Jiangchuan Zhang, Wu Yang, and Miao Yu. "Mathematical Performance Evaluation Model for Mobile Network Firewall Based on Queuing." Wireless Communications and Mobile Computing 2018 (2018): 1–13. http://dx.doi.org/10.1155/2018/8130152.

Full text
Abstract:
While mobile networks provide many opportunities for people, they face security problems huge enough that a firewall is essential. The firewall in mobile networks offers a secure intranet through which all traffic is handled and processed. Furthermore, due to the limited resources in mobile networks, the firewall execution can impact the quality of communication between the intranet and the Internet. In this paper, a performance evaluation mathematical model for firewall system of mobile networks is developed using queuing theory for a multihierarchy firewall with multiple concurrent services.
APA, Harvard, Vancouver, ISO, and other styles
13

Park, Jinyong, Byeongjo Park, and Tae-Sung Kim. "Development of an Anomaly Classification Model and a Decision Support Tool for Firewall Policy Configuration." Applied Sciences 15, no. 6 (2025): 2979. https://doi.org/10.3390/app15062979.

Full text
Abstract:
A firewall is a device that is used generally to prevent cyberattacks and protect internal assets by blocking unauthorized access. Information security managers have many difficulties in managing firewall policies due to errors or anomalies in the policy that are caused by frequent internal and external requests. This paper intends to develop an anomaly classification model to detect anomalies and measure the priority of resolution in firewall policy as well as a visualized tool that supports information security managers to manage their firewall policy efficiently. This model and tool help in
APA, Harvard, Vancouver, ISO, and other styles
14

Kailanya, Eunice, Mary Mwadulo, and Amos Omamo. "Dynamic deep stateful firewall packet analysis model." African Journal of Science, Technology and Social Sciences 1, no. 2 (2022): 116–23. http://dx.doi.org/10.58506/ajstss.v1i2.20.

Full text
Abstract:
Due to challenges of COVID -19 pandemic, network is widely used and more networkthreats are evolving, therefore, there is a need to improve network tools in order tocontrol threats. Stateful firewall is a network tool that build up packet filters by keepingrecord of packet passing through the network in a state table, so that when a newpacket arrives, the stateful firewall filtering mechanism first checks to determine whetherthe information is similar to the one in state table, in order to allow or blocked a packet.Although several stateful firewall models have been developed to filter network
APA, Harvard, Vancouver, ISO, and other styles
15

Frantzen, Mike, Florian Kerschbaum, E. Eugene Schultz, and Sonia Fahmy. "A Framework for Understanding Vulnerabilities in Firewalls Using a Dataflow Model of Firewall Internals." Computers & Security 20, no. 3 (2001): 263–70. http://dx.doi.org/10.1016/s0167-4048(01)00314-5.

Full text
APA, Harvard, Vancouver, ISO, and other styles
16

Yasir Saleem, Usama Anwar, Muhammad Khawar Bashir, Sheraz Naseer, and Nadia Tabassum. "Flow-Based Rules Generation for Intrusion Detection System using Machine Learning Approach." Lahore Garrison University Research Journal of Computer Science and Information Technology 4, no. 3 (2020): 54–70. http://dx.doi.org/10.54692/lgurjcsit.2020.0403100.

Full text
Abstract:
Rapid increase in internet users also brought new ways of privacy and security exploitation. Intrusion is one of such attacks in which an authorized user can access system resources and is major concern for cyber security community. Although AV and firewall companies work hard to cope with this kind of attacks and generate signatures for such exploits but still, they are lagging behind badly in this race. This research proposes an approach to ease the task of rules generationby making use of machine learning for this purpose. We used 17 network features to train a random forest classifier and
APA, Harvard, Vancouver, ISO, and other styles
17

Jasi, Teba Ali, and Muna M. Taher Jawhar. "Detecting network attacks Model based on a long short-term memory LSTM." Technium: Romanian Journal of Applied Sciences and Technology 4, no. 8 (2022): 64–72. http://dx.doi.org/10.47577/technium.v4i8.7225.

Full text
Abstract:
Nowadays, network-connected devices such as mobile phones and IoT devices are increasing, the types and numbers of these devices are increasing, the impact of successful attacks is increasing and the fear is growing due to the security effects when using them. In addition, a broader attack surface is available to identify and respond to these network attacks, different systems are used to prevent and stop Some of these systems consist of two layers, the first layer which provides Security and Intrusion Prevention is the firewall, while the second layer is the network intrusion detection system
APA, Harvard, Vancouver, ISO, and other styles
18

Mohammad, Anber Abraheem Shlash, Suleiman Ibrahim Shelash Mohammad, Badrea Al Oraini, Asokan Vasudevan, and Muhammad Turki Alshurideh. "Data security in digital accounting: A logistic regression analysis of risk factors." International Journal of Innovative Research and Scientific Studies 8, no. 1 (2025): 2699–709. https://doi.org/10.53894/ijirss.v8i1.5044.

Full text
Abstract:
This study examines the impact of cybersecurity measures on preventing data breaches in Jordanian organizations using digital accounting systems. A logistic regression model analyzes survey data from 231 organizations to assess the effects of employee training, firewall protection, two-factor authentication, and system update frequency on data breach occurrence. The Receiver Operating Characteristic (ROC) curve evaluates the predictive accuracy of the model. The findings indicate that system update frequency is the most effective factor in reducing breaches, while employee training, firewall p
APA, Harvard, Vancouver, ISO, and other styles
19

Nguyen Kim, Tuan, Tam Nguyen Tri, Lam Tran Nguyen, and Duy Thai Truong. "Energy-efficient relaying technology in multi-hop data transmission can help the challenges faced in cellular Vehicle-to-Everything (cellular-V2X) communication. However, due to high demand of emergency service requirements of the systems such as Public Protection and Disaster Relief (PPDR), National Security and Public Safety (NSPS), Intelligent Transport System (ITS) etc., least energy consumed user equipment (UEs)/Vehicular-UEs are required which can either run real-time applications or relay the application data. To support these scenarios, we present a high way based system model in rural area and enhance its scope for applying single-hop direct, relay assisted multi-hop cellular-V2X and Store-CarryForward (SCF) modes of uplink data transmission. We compare the performance of three modes of transmissions in terms of overall energy consumption and overall transmission delay with specific delay constraints of VoIP and video applications. With the varying cell radius and irrespective type of applications, our numerical results, validated with ns-3 show that, least energy is always consumed in SCF mode due to its inherent property but applications suffer a lot due to high delay incurred whereas singlehop direct mode shows the reverse. When compared with cellular-V2X mode, overall transmission delay for single-hop direct mode is acceptable within cell radius 600m but beyond that, relay assisted multi-hop cellular-V2X mode always outperforms (with low latency and moderate energy consumption)." International journal of Computer Networks & Communications 14, no. 1 (2022): 59–69. http://dx.doi.org/10.5121/ijcnc.2022.14104.

Full text
Abstract:
There are many security models for computer networks using a combination of Intrusion Detection System and Firewall proposed and deployed in practice. In this paper, we propose and implement a new model of the association between Intrusion Detection System and Firewall operations, which allows Intrusion Detection System to automatically update the firewall filtering rule table whenever it detects a weirdo intrusion. This helps protect the network from attacks from the Internet.
APA, Harvard, Vancouver, ISO, and other styles
20

Kaur, Gurvinder, Dr S. N. Panda, and Dr Dalvinder Singh Dhaliwal. "Model-Based Tool-Assistance for Packet-Filter Design and its Future." INTERNATIONAL JOURNAL OF COMPUTERS & TECHNOLOGY 13, no. 1 (2014): 4053–57. http://dx.doi.org/10.24297/ijct.v13i1.2929.

Full text
Abstract:
Firewall is a device that secure the private network from unauthorized access. Model based  tool assistance  facilitate the design task and has contribute to the correctness of the filters. But the model based tool assistance approach is design time only does not manage actions at run time. So we shall propose model on run time auditing architecture to detect the attack while packet filtering in firewall technology. It is usually based on the log-files of the packet-filters.
APA, Harvard, Vancouver, ISO, and other styles
21

Di, Xiao Qiang, Hua Min Yang, and Jin Qing Li. "Intrusion Response Mobile Firewall Design in Ad Hoc Networks and Based on SMP Performance Analysis." Applied Mechanics and Materials 496-500 (January 2014): 1909–14. http://dx.doi.org/10.4028/www.scientific.net/amm.496-500.1909.

Full text
Abstract:
According to the characteristics of Ad Hoc networks, distributed intrusion response mobile firewall system is designed based on mobile Agent. Surveillance agent monitors neighbors communication behavior, and reports to the control agent. Control agent is in charge of judging, and activates tracing agent and blocking agent. Defensive agent is set up in system to keep the firewall mobile features. Depending on semi-Markov process (SMP) theory, we have created a dynamic behavior model of the mobile firewall system and analyze the performance of network security.
APA, Harvard, Vancouver, ISO, and other styles
22

Aziz, Khairul, Supratman Zakir, Wedra Aprison, and Liza Efriyanti. "IMPLEMENTASI KEAMANAN JARINGAN DENGAN METODE FIREWALL FILTERING MENGGUNAKAN MIKROTIK DI SMKN 3 PAYAKUMBUH." JATI (Jurnal Mahasiswa Teknik Informatika) 8, no. 3 (2024): 3343–52. http://dx.doi.org/10.36040/jati.v8i3.9662.

Full text
Abstract:
Tujuan dari penelitian ini adalah keamanan jaringan dengan metode firewall filtering menggunakan mikrotik router RB941 di SMKN 3 Payakumbuh sering terjadinya keluhan guru tentang jaringan yang membuat para siswa tidak fokus untuk melakukan pembelajaran di kelas serta membuka berbagai situs website, game ONLINE dst. Berdasarkan hal tersebut maka dibutuhkan keamanan jaringan dengan metode firewall filtering menggunakan mikrotik router di SMKN 3 Payakumbuh agar pengguna jaringan menjadi fokus dalam hal pembelajaran. Penelitian keamanan jaringan dengan metode firewall filtering menggunakan mikroti
APA, Harvard, Vancouver, ISO, and other styles
23

Botvinko, Anatoly Yu, and Konstantin E. Samouylov. "Evaluation of firewall performance metrics with ranging the rules for Poisson incoming packet flow and exponential filtering time." Discrete and Continuous Models and Applied Computational Science 31, no. 4 (2023): 345–58. http://dx.doi.org/10.22363/2658-4670-2023-31-4-345-358.

Full text
Abstract:
The given article is a continuation of a number of works devoted to the development of models and methods for ranging the filtration rules to prevent a decrease in the firewall performance caused by the use of a sequential scheme for checking packet compliance with the rules, as well as by the heterogeneity and variability of network traffic. The article includes a description of a firewall mathematical model given in the form of a complex system and a queuing system with a phase-type discipline for request servicing, which formalizes the network traffic filtering process with the functionalit
APA, Harvard, Vancouver, ISO, and other styles
24

A. Zaki, Aya, and Saja J. Mohammed. "Artificial Intelligence for Web Application Firewall (WAF): A Comprehensive Review." International Research Journal of Innovations in Engineering and Technology 08, no. 11 (2024): 219–24. https://doi.org/10.47001/irjiet/2024.811027.

Full text
Abstract:
The increasing prevalence of cyberattacks that bypass traditional defenses necessitates prioritizing web application security .So, that create an urgent need to use “firewalls”, especially with web applications. The paper submitted a summary of the search and analysis of the scientific literature on web applications, in addition to the studies that have been suggested model for a “web application firewall (WAF)” that employed features engineering and machine learning to identify frequent online threats. The existing research examined WAFs and test their effectiveness in identifying fraudulent
APA, Harvard, Vancouver, ISO, and other styles
25

Pozo, S., R. Ceballos, and R. M. Gasca. "Model-Based Development of firewall rule sets: Diagnosing model inconsistencies." Information and Software Technology 51, no. 5 (2009): 894–915. http://dx.doi.org/10.1016/j.infsof.2008.05.001.

Full text
APA, Harvard, Vancouver, ISO, and other styles
26

Gawanmeh, Amjad, and Sofiène Tahar. "Domain Restriction Based Formal Model for Firewall Configurations." International Journal for Information Security Research 3, no. 2 (2013): 294–302. http://dx.doi.org/10.20533/ijisr.2042.4639.2013.0035.

Full text
APA, Harvard, Vancouver, ISO, and other styles
27

Adzimi, Sista Naelly, Hafiz Agi Alfasih, Fauzan Naufal Gibran Ramadhan, Shelvie Nidya Neyman, and Aep Setiawan. "Implementasi Konfigurasi Firewall dan Sistem Deteksi Intrusi menggunakan Debian." Journal of Internet and Software Engineering 1, no. 4 (2024): 12. http://dx.doi.org/10.47134/pjise.v1i4.2681.

Full text
Abstract:
Penelitian ini bertujuan untuk mengimplementasikan konfigurasi firewall dan sistem deteksi intrusi (IDS) menggunakan Debian, guna meningkatkan keamanan jaringan secara keseluruhan. Dalam era digital yang menghadirkan berbagai ancaman siber seperti malware, phishing, dan serangan DDoS, keamanan siber menjadi krusial. Debian dipilih karena stabilitas dan keamanannya, serta ketersediaan alat open-source seperti iptables untuk firewall dan Snort untuk IDS. Metodologi penelitian mencakup studi literatur, eksperimental, dan konfigurasi firewall yang disesuaikan dengan kebutuhan spesifik jaringan, se
APA, Harvard, Vancouver, ISO, and other styles
28

Yudhana, Anton, Imam Riadi, and Sri Suharti. "Network Forensics Against Volumetric-Based Distributed Denial of Service Attacks on Cloud and the Edge Computing." International Journal of Safety and Security Engineering 12, no. 5 (2022): 577–88. http://dx.doi.org/10.18280/ijsse.120505.

Full text
Abstract:
Cyber attacks are increasingly rampant and even damage the reputation of companies, agencies, and services. DDoS attacks have been overgrowing in the last year, which has resulted in substantial losses. Volumetric-based Distributed Denial of Service (DDoS) is a hazardous attack type because it can consume server resources, causing the server to be unable to serve customer requests. The network design consisting of hardware and software becomes the essential capital that is a determinant of the quality of a network in the long term. A firewall is one way to stop the occurrence of DDoS. Forensic
APA, Harvard, Vancouver, ISO, and other styles
29

Afrah Fathima, Et al. "Cyber security Reinforcement through Firewall Log Analysis and Machine Learning." International Journal on Recent and Innovation Trends in Computing and Communication 11, no. 10 (2023): 777–82. http://dx.doi.org/10.17762/ijritcc.v11i10.8574.

Full text
Abstract:
Firewalls play a crucial role as a primary protective measure in safeguarding network security, effectively mitigating risks posed by external vulnerabilities and internal security breaches. This study presents a new framework that utilizes firewall log data to classify incoming data packets as either permitted or forbidden. The dataset utilized in this research is obtained from Department of CS&IT, MANU University and is subjected to a thorough data pre-processing procedure. This procedure includes several tasks such as managing missing values, encoding categorical variables, standardizin
APA, Harvard, Vancouver, ISO, and other styles
30

Lee, Jae-Kook, Taeyoung Hong, and Gukhua Lee. "AI-Based Approach to Firewall Rule Refinement on High-Performance Computing Service Network." Applied Sciences 14, no. 11 (2024): 4373. http://dx.doi.org/10.3390/app14114373.

Full text
Abstract:
High-performance computing (HPC) relies heavily on network security, particularly when supercomputing services are provided via public networks. As supercomputer operators, we introduced several security devices, such as anti-DDoS, intrusion prevention systems (IPSs), firewalls, and web application firewalls, to ensure the secure use of supercomputing resources. Potential threats are identified based on predefined security policies and added to the firewall rules for access control after detecting abnormal behavior through anti-DDoS, IPS, and system access logs. After analyzing the status chan
APA, Harvard, Vancouver, ISO, and other styles
31

Qi, Bei, and Yun Feng Dong. "A New Model of Intrusion Detection Based on Data Warehouse and Data Mining." Advanced Materials Research 383-390 (November 2011): 303–7. http://dx.doi.org/10.4028/www.scientific.net/amr.383-390.303.

Full text
Abstract:
Now, security of network is threaten from double layers inside and outside network, the inherent defect of firewall technology makes the intrusion detection and network traffic analysis as the main means of defense, aiding firewall. Now network intrusion detection have problem of higher false alarm rate, we apply the data warehouse and the data mining in intrusion detection and the technology of network traffic monitoring and analysis, propose a new model of intrusion detection based on the data warehouse and the data mining. The experimental result indicates this model can find effectively ma
APA, Harvard, Vancouver, ISO, and other styles
32

Taylor, Onate, and Promise Ezekiel. "Firewall Defense and Response Policy towards Resisting Attacks on Network Logs." International Journal of Computing Sciences Research 8 (January 1, 2024): 2886–904. https://doi.org/10.25147/ijcsr.2017.001.1.193.

Full text
Abstract:
Background–In an era marked by escalating cyber threats, safeguarding network infrastructure and preserving the integrity of network logs have become paramount concerns for organizations worldwide.Objective: This paper proposes a robust Firewall Defense and Response Policy leveraging a state-of-the-art Gradient Boost Classifier to achieve exceptional accuracy in detecting cyber threats. Methods–The proposed methodology combines advanced machine learning techniques with an in-depth analysis of network logs. The model was trained on a comprehensive dataset, downloaded from Kaggle.com, comprising
APA, Harvard, Vancouver, ISO, and other styles
33

Du, Jia Wei, Xing Zhang, Ying Zhou, and Yong Qiang Bai. "Active Defense Security Model in the Application of Network Deception System Design." Applied Mechanics and Materials 347-350 (August 2013): 2860–64. http://dx.doi.org/10.4028/www.scientific.net/amm.347-350.2860.

Full text
Abstract:
As the traditional network defense is built on intrusion detection and passive protection, which is weak at dynamic response. The network deception technology in active protection is analyzed, and a network deception system based on active security model is proposed in this paper. This system implements a visual service of Honeypot as bait, analyses intrusion data and extracts new features and rules to enlarge the intrusion detection system feature library. The defense policies could be delivered real-time by management center. The problems of false alarm and leaking alarm for firewall or IDS
APA, Harvard, Vancouver, ISO, and other styles
34

Botvinko, Anatoly Y., and Konstantin E. Samouylov. "Evaluation of firewall performance when ranging a filtration rule set." Discrete and Continuous Models and Applied Computational Science 29, no. 3 (2021): 230–41. http://dx.doi.org/10.22363/2658-4670-2021-29-3-230-241.

Full text
Abstract:
This article is a continuation of a number of works devoted to evaluation of probabilistic-temporal characteristics of firewalls when ranging a filtration rule set. This work considers a problem of the decrease in the information flow filtering efficiency. The problem emerged due to the use of a sequential scheme for checking the compliance of packets with the rules, as well as due to heterogeneity and variability of network traffic. The order of rules is non-optimal, and this, in the high-dimensional list, significantly influences the firewall performance and also may cause a considerable tim
APA, Harvard, Vancouver, ISO, and other styles
35

Ding, Shijie, Zhiwei Zhang, and Jun Xie. "Network security defense model based on firewall and IPS." Journal of Intelligent & Fuzzy Systems 39, no. 6 (2020): 8961–69. http://dx.doi.org/10.3233/jifs-189294.

Full text
Abstract:
With the spread of the COVID-19 epidemic, the government has put forward higher requirements for network security and reliability through the flow of network managers and the release of information. Traditional intrusion detection technology and firewall technology cannot effectively defend against DDoS attacks. This paper analyzes the principles and defects of intrusion detection system and firewall. In this paper, the architecture design of intrusion prevention system which integrates audit and network defense functions is proposed. The system optimizes the detection and analysis component o
APA, Harvard, Vancouver, ISO, and other styles
36

Thyagarajan, C., S. Vijay Bhanu, and S. Suthir. "Hybrid ECD model for firewall tuning and attack detection." International Journal of Wireless and Mobile Computing 28, no. 1 (2025): 86–102. https://doi.org/10.1504/ijwmc.2025.143030.

Full text
APA, Harvard, Vancouver, ISO, and other styles
37

Li, Dong, Huaqun Guo, Jianying Zhou, Luying Zhou, and Jun Wen Wong. "SCADAWall: A CPI-enabled firewall model for SCADA security." Computers & Security 80 (January 2019): 134–54. http://dx.doi.org/10.1016/j.cose.2018.10.002.

Full text
APA, Harvard, Vancouver, ISO, and other styles
38

Trabelsi, Zouheir, Liren Zhang, Safaa Zeidan, and Kilani Ghoudi. "Dynamic traffic awareness statistical model for firewall performance enhancement." Computers & Security 39 (November 2013): 160–72. http://dx.doi.org/10.1016/j.cose.2013.07.001.

Full text
APA, Harvard, Vancouver, ISO, and other styles
39

Vydia, Vensy, Surono Surono, and Galih Setiarso. "APPLICATION GATEWAY DAN STATEFUL INSPECTION METHOD PADA IMPLEMENTASI FIREWALL UNTUK OPTIMASI KEAMANAN JARINGAN KOMPUTER." Jurnal Pengembangan Rekayasa dan Teknologi 4, no. 2 (2020): 87. http://dx.doi.org/10.26623/jprt.v16i2.2624.

Full text
Abstract:
<p><em>Firewall</em> atau keamanan sangat di perlukan untuk jaringan internet pada saat ini dengan semakin berkembangnya teknologi internet dan semakin berkembangnya berbagai macam ancaman dari dunia maya entah itu virus maupun yang lainya firewall merupakan alat atau software keamana jaringan seperti pada hadware jaringan pada umumnya dan <em>firewall Application Gateway</em> ini sangat sesui diterapkan pada model jaringan internet dengan sekala menengah maupun sekala besar, suatu kampus dengan jaringan yang sangat luas dan besar sangat memerlukan <em>firew
APA, Harvard, Vancouver, ISO, and other styles
40

Asaolu, Opeyemi Oreoluwa, Oluwasanmi Segun Adanigbo, Afeez Adekunle Soladoye, and Nnamdi Stephen Okomba. "Principal Component Analysis-Multilinear Perceptron-based model for Distributed Denial of Service Attack Mitigation." ABUAD Journal of Engineering Research and Development (AJERD) 8, no. 2 (2025): 14–24. https://doi.org/10.53982/ajerd.2025.0802.02-j.

Full text
Abstract:
The increasing occurrence of Distributed Denial of Service (DDoS) attacks has caused significant disruptions in global network services, overwhelming targets by flooding them with requests from various sources. This ease of execution and gaining entry to distributed systems for rent has led to increasing financial losses. This paper addresses the growing challenge of IoT devices-targeted Distributed Denial of Service (DDoS) attacks within 4G networks. In this study, a PCA-MLP (Principal Component Analysis-Multi-Layer Perceptron) intrusion detection model combined with a packet-filtering firewa
APA, Harvard, Vancouver, ISO, and other styles
41

Singh, Aditya, Siddharth Nag, Sakshi Pateriya, Ashok Masih, and Aakrati Nigam. "Machine Learning Algorithm as a Firewall Decision and Reinforcement in Market Segmentation and Big Data." INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT 08, no. 11 (2024): 1–5. https://doi.org/10.55041/ijsrem39264.

Full text
Abstract:
In the modern digital landscape, vast amounts of data are generated daily, challenging traditional analytical approaches in both data security and market segmentation. This paper presents a machine learning (ML) algorithm designed to serve a dual purpose: as a decision-support firewall system and as a reinforcement tool for market segmentation within big data environments. By integrating supervised and unsupervised learning models, the proposed algorithm effectively detects anomalies and potential security threats while also identifying distinct customer segments with high precision. The firew
APA, Harvard, Vancouver, ISO, and other styles
42

Rondalev, Denis, Olga Melkozerova, and Oleksii Nariezhnii. "Features of the functioning of the corporate firewall and issues of interaction with the IDS system." Computer Science and Cybersecurity, no. 3 (2019): 11–21. http://dx.doi.org/10.26565/2519-2310-2019-3-02.

Full text
Abstract:
Offers a brief overview of the features of using a corporate firewall and the issues of interaction with the elements of the IDS system. Some important features of synthesis of the threat model are considered. Attention was drawn to the importance of correct IDS system setup (Snort). The basic stages of configuration and some features of the assessment of the level of protection of the corporate firewall are highlighted. Attention is drawn to the importance of network resource segmentation and IDS system sensor placement.
APA, Harvard, Vancouver, ISO, and other styles
43

Ozhiganova, Marina, and Emil Kurtametov. "Using Neural Networks to Protect Web Applications." NBI Technologies, no. 2 (December 2020): 16–20. http://dx.doi.org/10.15688/nbit.jvolsu.2020.2.3.

Full text
Abstract:
Security of network systems has become a necessity, as more and more important information is stored and used online. The spread of web applications opens up new attack vectors. Traditional security mechanisms, such as firewalls, are not designed to protect web applications and therefore do not provide adequate protection. Current attacks cannot be prevented only by blocking ports 80 (HTTP) and 443 (HTTPS). Preventative measures (such as web application firewall rules) are not always possible. Signature methods for detection are always behind the actual event. Protocol-enforced network firewal
APA, Harvard, Vancouver, ISO, and other styles
44

Wang, Zhihua, Minghui Jin, Youlin Hu, Dacheng Shan, Lizhao You, and Peijun Chen. "Towards Efficient and Accurate Network Exposure Surface Analysis for Enterprise Networks." Electronics 14, no. 12 (2025): 2409. https://doi.org/10.3390/electronics14122409.

Full text
Abstract:
Network exposure surface analysis aims to identify network assets that are exposed to the Internet and is critical for enterprise security. However, existing tools face two key challenges: combinatorial explosion in traditional packet testing, and high false positive rates in firewall-based static analysis. To address these issues, this paper proposes a network model-based approach to accurately characterize the forwarding behaviors of devices in enterprise networks, and performs network-level static analysis on the established graph model. Specifically, we construct a device-level forwarding
APA, Harvard, Vancouver, ISO, and other styles
45

Yang, Simin, Bart Dewancker, and Shuo Chen. "Study on Passive Heating Involving Firewalls with an Additional Sunlight Room in Rural Residential Buildings." International Journal of Environmental Research and Public Health 18, no. 21 (2021): 11147. http://dx.doi.org/10.3390/ijerph182111147.

Full text
Abstract:
With the growth in China’s economic GDP, energy consumption has increased year by year. The energy demand of rural residential buildings is 223 million tons of standard coal equivalent, accounting for 24% of the national energy demand. Therefore, an energy-saving design for rural residences is necessary. This research took the traditional residences in southern Shaanxi as the research object and combined the cooking methods in southern Shaanxi with solar heating, proposing a sunlight heating system with an additional firewall. The system is composed of a firewall system and a sunlight system.
APA, Harvard, Vancouver, ISO, and other styles
46

Huwaidi, Muhammad Zulfahmi, and Senie Destya. "Mencegah Serangan Rekayasa Sosial dengan Human Firewall." Jurnal Sistem dan Teknologi Informasi (JustIN) 10, no. 1 (2022): 107. http://dx.doi.org/10.26418/justin.v10i1.44280.

Full text
Abstract:
Manusia adalah elemen paling rentan yang ada pada sistem keamanan informasi. Seringkali orang menganggap bahwa apa yang dibagikan di dunia maya atau dunia siber adalah hal yang tidak penting, tetapi bagi sebagian orang, data dan informasi yang sangat banyak di internet bisa digunakan untuk tindak kejahatan yang membuat kerugian yang besar. Salah satu teknik yang digunakan pelaku tindak kejahatan dunia siber disebut dengan teknik rekayasa sosial. Hal ini menuntut orang-orang agar selalu waspada dan berhati-hati karena pada dasarnya serangan ini memanfaatkan dan maminupalisi manusia agar memberi
APA, Harvard, Vancouver, ISO, and other styles
47

Rafamantanantsoa, Fontaine, and Haja Louis Rabetafika. "Performance Comparison and Simulink Model of Firewall Free BSD and Linux." Communications and Network 10, no. 04 (2018): 180–95. http://dx.doi.org/10.4236/cn.2018.104015.

Full text
APA, Harvard, Vancouver, ISO, and other styles
48

Barhoom, Tawfiq SM, and Emad KH Elrayyes. "Model for Strengthening Accuracy through Detection of Anomalous Firewall Policy Rules." International Journal of Innovative Research in Computer and Communication Engineering 02, no. 12 (2014): 7116–24. http://dx.doi.org/10.15680/ijircce.2014.0212050.

Full text
APA, Harvard, Vancouver, ISO, and other styles
49

Sami Hasan, Amer, and Zaid Hashim Jaber. "FPKIN: Firewall Public Key Infrastructure for NEMO." International Journal of Engineering & Technology 7, no. 3.20 (2018): 422. http://dx.doi.org/10.14419/ijet.v7i3.20.20585.

Full text
Abstract:
Network mobility (NEMO) is an important requirement for internet networks to reach the goal of ubiquitous connectivity. With NEMO basic support protocols, correspondent entities suffer from a number of limitations and problems that prevent route-optimization procedures to be established between the correspondent nodes and mobile network nodes associated with NEMO. The goal is to alleviate the signaling load and execute the route-optimization steps on behalf of the correspondent entities that are not sophisticated enough to support route optimization. This paper introduces a new architecture th
APA, Harvard, Vancouver, ISO, and other styles
50

Gavrić, Nikola. "MODEL DDOS NAPADA APLIKACIONOG SLOJA GAMING SERVERA EKSPLOATACIJOM KLIJENTSKE APLIKACIJE." Zbornik radova Fakulteta tehničkih nauka u Novom Sadu 34, no. 11 (2019): 2044–47. http://dx.doi.org/10.24867/05be28gavric.

Full text
Abstract:
U radu se analiziraju problemi i posledice DdoS napada na aplikacionom sloju gaming servera. Postavljena je hipoteza, da deo tih napada nastaje eksploatacijom klijentske aplikacije. Radi potvrde postavljene hipoteze, izvršena je simulacija napada u laboratijskim uslovima. Dobijeni su rezulati u formi logova na serveu koji su prikazani u grafičkoj formi. Njihovom evaluacijom došlo se do određenih zaključaka na osnovu kojih je predloženo je rešenje za zaštitu od ovih napada, koje se bazira na primeni machine learning tehnike na mrežnim firewall-ima.
APA, Harvard, Vancouver, ISO, and other styles
We offer discounts on all premium plans for authors whose works are included in thematic literature selections. Contact us to get a unique promo code!

To the bibliography