Aleksandr Silinenko

Delimiting access in networks based on virtual connection models

Implement firewalling in IP networks based on analysis of virtual connection characteristics

• Broschiertes Buch

Produktbeschreibung

An urgent scientific and technical task at present is to develop and improve methods and means of access control in IP networks based on detecting and blocking virtual connections that pose a threat to information security of network resources. In this paper we propose an approach to solving this problem, based on the representation of each virtual connection in the form of state model. This model includes both deterministic parameters of the network, transport and application levels of interconnection, as well as statistical characteristics of IP-packet flow. The parameters of the model are analysed by the firewall, which runs in stealth mode. It is based on the set-theoretic virtual connection model proposed by the author, as well as on the filtering rules algebra, which formally describes the policy of access to network resources. A description of the developed virtual connection state models, a technique to detect flood attacks based on analysis of statistical characteristicsof virtual connections, as well as firewall architecture that implements the results obtained in the work are presented.

Produktdetails

• Verlag: Our Knowledge Publishing
• Seitenzahl: 144
• Erscheinungstermin: 5. Juli 2021
• Englisch
• Abmessung: 220mm x 150mm x 9mm
• Gewicht: 233g
• ISBN-13: 9786203497151
• ISBN-10: 6203497150
• Artikelnr.: 62281154

Autorenporträt

Nació en 1976 en Frunze. En 1993 se graduó en el instituto y entró en la Universidad Técnica Estatal de San Petersburgo. En 1999 obtuvo un máster en "Análisis y gestión de sistemas". En 2010 defendió la tesis doctoral en la especialidad 05.13.19. En la actualidad - jefe de laboratorio en el Instituto de Investigación Científica de Robótica y Radioelectrónica.