Improving Packet Filters Management through Automatic and Dynamic Schemes

The development of complex access control architectures raises the problem of their management. In this article, we describe an architecture providing packet filters configuration in Internet based networks. The performance of the access control process heavily depends on the number of rules used to define the access control service. Therefore an efficient access control architecture relies on a clever access control rule configuration. The current approaches to this problem are based on a static description of the network which can force security officers to choose between efficiency and manageability. Our distribution architecture doesn’t rely on a model of the network and thus eliminates this limitation while proposing three optimisations in order to provide the access control processes with optimal configurations.