International Conference on Networking and Services (ICNS '07) Towards System-level Optimization for High Performance Unified Threat Management Athens, Greece June 19-June 25 ISBN: 0-7695-2858-9
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICNS.2007.126
To build holistic protection against complex and blended network threats, multiple security features need to be integrated into unified security architecture, which requires in a Unified Threat Management (UTM). However, most existing UTMs operate by simply stringing together a number of security applications working independently without system level optimization that streamlines processing flow and leverages shared information and resources to reach high performance. In this paper, a generic framework is proposed to optimize the performance of UTMs at both algorithmic and architectural aspects by exploring the idea of Integrated Protocol Processing (IPP). The algorithm proposed in this paper improves overall protocol processing complexity of ACL and IDS from ?(log(M)+log(N)) to ?(log(M+N)) . Experiments on Intel IXP2850 network processor show that our scheme outperforms existing solutions with 30% increase of throughput.
Citation:
Yaxuan Qi, Baohua Yang, Bo Xu, Jun Li, "Towards System-level Optimization for High Performance Unified Threat Management," icns, pp.7, International Conference on Networking and Services (ICNS '07), 2007 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||