Skip to Main content Skip to Navigation
Poster communications

Minimizing Range Rules for Packet Filtering Using a Double Mask Representation

Ahmad Abboud 1 Abdelkader Lahmadi 2 Michaël Rusinowitch 3 Miguel Couceiro 4 Adel Bouhoula 5
1 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
3 PESTO - Proof techniques for security protocols
Inria Nancy - Grand Est, LORIA - FM - Department of Formal Methods
4 ORPAILLEUR - Knowledge representation, reasonning
Inria Nancy - Grand Est, LORIA - NLPKD - Department of Natural Language Processing & Knowledge Discovery
Abstract : In this work, we introduce a novel representation of packet filtering rules, so called double masks, where the first mask is used as an inclusion prefix and the second one for exclusion. An efficient algorithm is developed to compute a set of double masks for a given range.
Document type :
Poster communications
Complete list of metadata

Cited literature [2 references]  Display  Hide  Download

https://hal.inria.fr/hal-02393008
Contributor : Ahmad Abboud <>
Submitted on : Wednesday, December 4, 2019 - 11:10:24 AM
Last modification on : Tuesday, August 18, 2020 - 1:54:05 PM
Long-term archiving on: : Thursday, March 5, 2020 - 2:53:38 PM

File

main.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-02393008, version 1

Citation

Ahmad Abboud, Abdelkader Lahmadi, Michaël Rusinowitch, Miguel Couceiro, Adel Bouhoula. Minimizing Range Rules for Packet Filtering Using a Double Mask Representation. IFIP Networking 2019, May 2019, Varsovie, Poland. ⟨hal-02393008⟩

Share

Metrics

Record views

102

Files downloads

328