Contributo in atti di convegno, 2022, ENG, 10.1109/WFCS53837.2022.9779199

Improving performance and cyber-attack resilience in multi-firewall industrial networks

Seno L.; Cheminod M.; Cibrario Bertolotti I.; Durante L.; Valenzano A.

National Research Council Of Italy, Institute Of Electronics, Information And Telecommunications Engineering (CNR-IEIIT), Torino, 10129, National Research Council of Italy-Institute of Electronics, Information and Telecommunications Engineering (CNR-IEIIT), Torino, Italy, 10129, , Italy

Firewalls are popular cyber-security countermea-sures that are increasingly used in industrial environments to protect the network infrastructure from attacks and malicious behavior. Unfortunately, they can also become inadvertent bot-tlenecks when the traffic load they have to filter grows larger. Among the different solutions that have been proposed to mitigate this aspect and improve performance of devices, rule migration looks appealing also in industrial multi-firewall systems because, differently from other techniques appeared in the literature, it neither requires interventions on the network topology nor it is based on non-standard packet formats and protocols. This paper is aimed at presenting some preliminary results about performance achievable with the rule migration approach, when it is applied to the popular Iptables open source firewall, in the light of its possible adoption in industrial application scenarios.

18th IEEE International Conference on Factory Communication Systems (WFCS), 27-29/04/2022

Keywords

Industrial cybersecurity, industrial network se- curity, firewalls, load balancing, experimental evaluation, Linux Iptables

CNR authors

Durante Luca, Seno Lucia, Cheminod Manuel, Valenzano Adriano, Cibrario Bertolotti Ivan

CNR institutes

IEIIT – Istituto di elettronica e di ingegneria dell'informazione e delle telecomunicazioni

ID: 476840

Year: 2022

Type: Contributo in atti di convegno

Creation: 2023-01-23 13:31:34.000

Last update: 2023-09-05 16:21:22.000

External IDs

CNR OAI-PMH: oai:it.cnr:prodotti:476840

DOI: 10.1109/WFCS53837.2022.9779199

Scopus: 2-s2.0-85131803981