Abstract

The NAI Labs Advanced Security Proxies (ASP) project is investigating software architectures for high-performance firewalls to enable the secure use of next generation networks. The project objective is to demonstrate an architecture and implementation in which protocol-specific proxies control when data transmission is allowed across the firewall, but which allows the proxy a range of options in determining how that data transits the firewall. By employing proxies that selectively use a range of lower-level protocol stack features, this novel architecture provides higher performance and greater flexibility in determining exactly what information the proxies examine. These decisions are made at the granularity of each proxied connection. We describe the firewall design and implementation and report preliminary experimental results using Fast Ethernet.

Date

2000

Authors

Roger Knobbe, Andrew Purtell, Stephen Schwab

Conference

Proceedings DARPA Information Survivability Conference and Exposition. DISCEX'00

Volume

1

Pages

140-148

Publisher

IEEE