Skip to Main content Skip to Navigation
Poster communications

Minimizing Range Rules for Packet Filtering Using a Double Mask Representation

Ahmad Abboud 1 Abdelkader Lahmadi 1 Michaël Rusinowitch 2 Miguel Couceiro 3 Adel Bouhoula 4 
1 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
2 PESTO - Proof techniques for security protocols
Inria Nancy - Grand Est, LORIA - FM - Department of Formal Methods
3 ORPAILLEUR - Knowledge representation, reasonning
Inria Nancy - Grand Est, LORIA - NLPKD - Department of Natural Language Processing & Knowledge Discovery
Abstract : In this work, we introduce a novel representation of packet filtering rules, so called double masks, where the first mask is used as an inclusion prefix and the second one for exclusion. An efficient algorithm is developed to compute a set of double masks for a given range.
Document type :
Poster communications
Complete list of metadata

Cited literature [2 references]  Display  Hide  Download
Contributor : Ahmad ABBOUD Connect in order to contact the contributor
Submitted on : Wednesday, December 4, 2019 - 11:10:24 AM
Last modification on : Friday, August 5, 2022 - 3:50:42 AM
Long-term archiving on: : Thursday, March 5, 2020 - 2:53:38 PM


Files produced by the author(s)


  • HAL Id : hal-02393008, version 1


Ahmad Abboud, Abdelkader Lahmadi, Michaël Rusinowitch, Miguel Couceiro, Adel Bouhoula. Minimizing Range Rules for Packet Filtering Using a Double Mask Representation. IFIP Networking 2019, May 2019, Varsovie, Poland. ⟨hal-02393008⟩



Record views


Files downloads