Network Security Group

From distributed firewall designs to intelligent malware containment, the NSG is investigating various techniques to address the security threats expected in the next generation of high-speed and QoS-enabled networks.

Windows on Wake Forest (WOWF) wrote a story describing the DOE firewall project [story].

This work has also resulted in a new WFU sponsored spin-off company, GreatWall Systems, web-site available shortly...

This research group is funded through the Mathematical, Informational, and Computational Sciences Division of the US Department of Energy, Pacific Northwest National Laboratory (PNNL) (CyberCIEGE group), and Wake Forest University. We gratefully acknowledge their continued support.

Weekly meetings have resumed (most Tuesdays at 11:00am)

If you are a WFU student and interested in security research, join us! Email Fulp (fulp @wfu.edu, remove the space) for details.

• High-Speed and QoS Firewalls - Distributed firewall designs that maintain QoS requirements in a high-speed environment
• Network Firewall Policy Representation and Optimization - New firewall representations that process packets with few comparisons
• Distributed Intrustion Detection Systems (IDS) - Distributed IDS to detect attacks in a scalable fashion
• Malware Containment - Dynamic systems that intelligently detect and quarantine malware at multiple OSI layers

• Current Errin Fulp, Steve Tarsa, Matt Lane, Michael Horvath, and Patrick Wheeler (UC Davis) associate director
• Former Ryan Farley (GreatWall Systems), Joe Antrosio (Microsoft), Katie Batten (Accenture), and Dustin Smith (MIT Media Lab). Many thanks to these students for their hard work.

• Fulp - "Distributed Data Parallel Techniques for Content-Matching Intrusion Detection Systems", IEEE MILCOM 2007
• Fulp - "High-Speed Firewalls", IEEE INFOCOM 2006
• Tarsa - "Balancing Trie-Based Policies", IEEE ISCC 2006
• Farley - "Function-Parallel Firewalls", IEEE ICC 2006

Page last updated 11/28/2007