Rule Dependencies in Access Control Lists
Grout, Vic, McGinn, John, Davies, John N, Picking, Rich and Cunningham, Stuart (2006) Rule Dependencies in Access Control Lists. In: UNSPECIFIED.
|
PDF
fulltext.pdf Download (214kB) | Preview |
Abstract
This paper considers the effects of dependencies between rules in Access Control Lists (ACLs). Dependent rules may not be reordered in an ACL if the policies of the list are to be preserved. This is an obstacle to the optimisation of rule order intended to reduce the time taken matching packets against rules. In this paper, the concept of rule dependency is defined in relation to the problem of minimising processing latency. The concepts of dependence and possible dependence are introduced and the relationship between them considered. Two measures of dependency, the dependency index and the fragmented dependency index are defined and formulated and an upper bound for each is derived. Examples of real-world ACLs are studied and the implications for practical optimisation discussed.
| Item Type: | Conference or Workshop Item |
|---|---|
| Additional Information: | Copyright © 2006 iadis and authors. This is a reprint of a paper that was presented at the International Association for Development of the Information Society (IADIS) International Conference WWW/Internet 2006 (ICWI 2006), on the 5th-8th October 2006 which was held in Murcia, Spain. It was also published in the conference proceedings. The iadis website is available here http://www.iadisportal.org/ and details of the conference are available at http://www.iadis.org/icwi2006/index.asp |
| Keywords: | access control lists (ACLs), rule dependencies, optimisation, packet latency |
| Divisions: | ?? GlyndwrUniversity ?? |
| Depositing User: | ULCC Admin |
| Date Deposited: | 05 Oct 2011 09:14 |
| Last Modified: | 11 Dec 2017 20:06 |
| URI: | https://wrexham.repository.guildhe.ac.uk/id/eprint/266 |
Actions (login required)
 |
Edit Item |