Location of Repository

A distributed firewall for multimedia applications

By Utz Roedig, Ralf Ackermann, Christoph Rensing and Ralf Steinmetz

Abstract

Firewalls are a widely used security mechanism to provide access control and auditing at the border between "open" and private networks or administrative domains. As part of the network infrastructure they are strongly affected by the development and deployment of new communication paradigms and applications. Currently we experience a very fast rise in the use of multimedia applications. These differ in many aspects from "traditional applications", for example concerning bandwidth usage, dynamic protocol elements or multiple data flows for one application session. Corresponding firewall mechanisms and techniques did not change with the same dynamics though. Currently existing firewalls have problems supporting these new type of applications because to some extent they try to map the new characteristics to the manner of conventional applications which they are able to handle. We strongly believe that new application types require new firewall techniques and mechanisms. In this paper, we identify typical characteristics of multimedia applications that cause problems using traditional firewalls. Based on this analysis we deduce enhancements to existing firewalls that can be used to better adapt to a communication environment in which multimedia applications are used. We describe these enhancements in general, show a adequate systems architecture and present a implementation based on this design. The feasibility of that approach has been shown in the example scenario that we finally present

Topics: QA75 Electronic computers. Computer science
Publisher: Springer Verlag
Year: 2000
DOI identifier: 10.1007/978-3-642-58346-9_1
OAI identifier: oai:eprints.lancs.ac.uk:60635
Provided by: Lancaster E-Prints

Suggested articles

Preview

Citations

  1. (1994). Bellovin S.M.: Firewalls and Internet Security, doi
  2. (1995). Building Internet Firewalls, OÕReilly,
  3. (1997). CiscoÕs PIX Firewall Series and Stateful Firewall Security, White Paper, doi
  4. (1991). Internetworking with TCP/IP, Volume I, 2nd Edition,
  5. (1998). IP Multicast and Firewalls, Internet Draf draft-ietf-mboned-mcast-firewall02.txt,
  6. (1995). Multimedia: Computing, doi
  7. Network Associates: Application Gateways and Stateful Inspection,
  8. Parallel Firewalls: Scalable solutions for High-speed Networks
  9. Progressive Networks: Real Audio,
  10. Recommendation H.323, Packet-Based Multimedia Communications Systems, doi
  11. (2000). The 1st IP Telephony Workshop,
  12. (1998). Tools for measuring the Performance of Proxies [German], published in MMB-Arbeitsgesprche: ÒLeistungs-, Zuverlssigkeits- und Verl§lichkeitsbewertung von Kommunikationsnetzen und verteilten SystemenÓ,
  13. (1998). Workshop Sicherheit in vernetzten Systemen,

To submit an update or takedown request for this paper, please submit an Update/Correction/Removal Request.