Architecture and Applications for a Distributed Embedded Firewall

The distributed firewall is an important new line of network defense. It provides fine-grained access control to augment the protections afforded by the traditional perimeter firewall. To be effective, though, a distributed firewall must satisfy two critical requirements. First, it must embrace a protection model that acknowledges that everything behind the firewall may not be trustworthy. The malicious insider with unobstructed access the network can still mount limited attacks. Second, the firewall must be tamperresistant. Any firewall that executes on the same untrusted operating system that it is charged to protect begs the question: who is protecting whom? This paper presents a new distributed, embedded firewall that satisfies both requirements. The firewall filters Internet Protocol traffic to and from the host. The firewall is tamper-resistant because it is independent of the host's operating system. It is implemented on the host's network interface card and managed b...

• Type: Conference
• Year: 2001
• Where: ACSAC
• Authors: Charles Payne, Tom Markham
• Keywords: ACSAC 2001, Distributed Firewall, Firewall, Security Privacy, Traditional Perimeter Firewall