Art

J-GLOBAL ID：201802262449532786   Reference number：18A2207120

Design and Implementation of SDN-Based Proactive Firewall System in Collaboration with Domain Name Resolution

ドメイン名解決との協調したSDNベース前向きファイアウォールシステムの設計と実装

Author (5)： IKARASHI Hiroya (Tokyo University of Agriculture and Technology) ,  JIN Yong (Tokyo Institute of Technology) ,  YAMAI Nariyoshi (Tokyo University of Agriculture and Technology) ,  KITAGAWA Naoya (Tokyo University of Agriculture and Technology) ,  OKAYAMA Kiyohiko (Okayama University)
Material： IEICE Transactions on Information and Systems (Web)  (IEICE Trans Inf Syst (Web))
Volume： E101.D  Issue： 11  Page： 2633-2643(J-STAGE)  Publication year： 2018 
JST Material Number： U0469A  ISSN： 1745-1361  Document type： Article
Article type： 原著論文  Country of issue： Japan (JPN)  Language： ENGLISH (EN)

Thesaurus term： *firewall ,  *addressing ,  *network ,  action and behavior ,  system ,  computer system (hardware) ,  communication control ,  addressing system ,  throughput ,  protocol ,  cyberattack ,  domain name system Server ,  internet protocol address
Semi thesaurus term： Intrusion Detection System/Intrusion Protection System ,  *Software Defined Networking ,  OpenFlow ,  *name resolution

Author keywords (7)： firewall system ,  DNS ,  domain name resolution ,  EDNS ,  client subnet option ,  SDN ,  OpenFlow

JST classification (2)： Data protection  (JD01020V) ,  Computer networks  (JC03000K)

Reference (32)：

• [1] T. Otsuka, N. Yamai, K. Okayama, Y. Jin, H. Ikarashi, and N. Kitagawa, “Design and Implementation of Proactive Firewall System in Cooperation with DNS and SDN,” The 31st Int'l Tech. Conf. on Circuits/Syst., Comput. and Commun. (ITC-CSCC 2016), Naha, Japan, pp.25-28, July 2016.
• [2] J. Verdú, M. Nemirovsky, and M. Valero, “MultiLayer Processing-An execution model for parallel stateful packet processing,” The 4th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, San Jose, USA, pp.79-88, 2008. 10.1145/1477942.1477954
• [3] F. Yu, Z. Chen, Y. Diao, T.V. Lakshman, and R.H. Katz, “Fast and Memory-Efficient Regular Expression Matching for Deep Packet Inspection,” Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems, San Jose, California, USA, pp.93-102, 2006. 10.1145/1185347.1185360
• [4] C. Contavalli, W. van der Gaast, D. Lawrence, and W. Kumari, “Client Subnet Option in DNS Queries,” RFC7871, IETF, 2016.
• [5] “What are FireHOL and FireQOS?” https://firehol.org/ (accessed 2018-05-12).

Terms in the title (5)： ドメイン名 ,  協調 ,  ファイアウォール ,  設計 ,  実装