{"id":"https://openalex.org/W4381744925","doi":"https://doi.org/10.1109/noms56928.2023.10154224","title":"Moving Down the Stack: Performance Evaluation of Packet Processing Technologies for Stateful Firewalls","display_name":"Moving Down the Stack: Performance Evaluation of Packet Processing Technologies for Stateful Firewalls","publication_year":2023,"publication_date":"2023-05-08","ids":{"openalex":"https://openalex.org/W4381744925","doi":"https://doi.org/10.1109/noms56928.2023.10154224"},"language":"en","primary_location":{"id":"doi:10.1109/noms56928.2023.10154224","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms56928.2023.10154224","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2023-2023 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022802732","display_name":"Katharina Dietz","orcid":"https://orcid.org/0009-0000-1658-4539"},"institutions":[{"id":"https://openalex.org/I25974101","display_name":"University of W\u00fcrzburg","ror":"https://ror.org/00fbnyb24","country_code":"DE","type":"education","lineage":["https://openalex.org/I25974101"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Katharina Dietz","raw_affiliation_strings":["University of Würzburg"],"affiliations":[{"raw_affiliation_string":"University of Würzburg","institution_ids":["https://openalex.org/I25974101"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103154782","display_name":"Nicholas Gray","orcid":"https://orcid.org/0000-0002-0930-4575"},"institutions":[{"id":"https://openalex.org/I25974101","display_name":"University of W\u00fcrzburg","ror":"https://ror.org/00fbnyb24","country_code":"DE","type":"education","lineage":["https://openalex.org/I25974101"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Nicholas Gray","raw_affiliation_strings":["University of Würzburg"],"affiliations":[{"raw_affiliation_string":"University of Würzburg","institution_ids":["https://openalex.org/I25974101"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092244613","display_name":"Manuel Wolz","orcid":null},"institutions":[{"id":"https://openalex.org/I25974101","display_name":"University of W\u00fcrzburg","ror":"https://ror.org/00fbnyb24","country_code":"DE","type":"education","lineage":["https://openalex.org/I25974101"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Manuel Wolz","raw_affiliation_strings":["University of Würzburg"],"affiliations":[{"raw_affiliation_string":"University of Würzburg","institution_ids":["https://openalex.org/I25974101"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037479423","display_name":"Claas Lorenz","orcid":"https://orcid.org/0000-0002-9089-6968"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Claas Lorenz","raw_affiliation_strings":["genua GmbH"],"affiliations":[{"raw_affiliation_string":"genua GmbH","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025794971","display_name":"Tobias Ho\u00dffeld","orcid":"https://orcid.org/0000-0003-0173-595X"},"institutions":[{"id":"https://openalex.org/I25974101","display_name":"University of W\u00fcrzburg","ror":"https://ror.org/00fbnyb24","country_code":"DE","type":"education","lineage":["https://openalex.org/I25974101"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tobias Ho\u00dffeld","raw_affiliation_strings":["University of Würzburg"],"affiliations":[{"raw_affiliation_string":"University of Würzburg","institution_ids":["https://openalex.org/I25974101"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010332473","display_name":"Michael Seufert","orcid":"https://orcid.org/0000-0002-5036-5206"},"institutions":[{"id":"https://openalex.org/I25974101","display_name":"University of W\u00fcrzburg","ror":"https://ror.org/00fbnyb24","country_code":"DE","type":"education","lineage":["https://openalex.org/I25974101"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Michael Seufert","raw_affiliation_strings":["University of Würzburg"],"affiliations":[{"raw_affiliation_string":"University of Würzburg","institution_ids":["https://openalex.org/I25974101"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5022802732"],"corresponding_institution_ids":["https://openalex.org/I25974101"],"apc_list":null,"apc_paid":null,"fwci":0.6052,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.6781457,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.96968013048172},{"id":"https://openalex.org/keywords/packet-processing","display_name":"Packet processing","score":0.8624682426452637},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7977697849273682},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.7096359729766846},{"id":"https://openalex.org/keywords/context-based-access-control","display_name":"Context-based access control","score":0.6156893968582153},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.6001816987991333},{"id":"https://openalex.org/keywords/application-firewall","display_name":"Application firewall","score":0.5893930196762085},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5386229753494263},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.5371416807174683},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5297079086303711},{"id":"https://openalex.org/keywords/network-processor","display_name":"Network processor","score":0.4755812883377075},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4420895576477051},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.4264680743217468},{"id":"https://openalex.org/keywords/computer-architecture","display_name":"Computer architecture","score":0.36090052127838135},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.344137966632843}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.96968013048172},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.8624682426452637},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7977697849273682},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.7096359729766846},{"id":"https://openalex.org/C42934231","wikidata":"https://www.wikidata.org/wiki/Q1128692","display_name":"Context-based access control","level":5,"score":0.6156893968582153},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.6001816987991333},{"id":"https://openalex.org/C86444895","wikidata":"https://www.wikidata.org/wiki/Q451816","display_name":"Application firewall","level":4,"score":0.5893930196762085},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5386229753494263},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.5371416807174683},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5297079086303711},{"id":"https://openalex.org/C74366991","wikidata":"https://www.wikidata.org/wiki/Q2755335","display_name":"Network processor","level":3,"score":0.4755812883377075},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4420895576477051},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.4264680743217468},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.36090052127838135},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.344137966632843},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0},{"id":"https://openalex.org/C124017977","wikidata":"https://www.wikidata.org/wiki/Q11412","display_name":"Gravitation","level":2,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C74650414","wikidata":"https://www.wikidata.org/wiki/Q11397","display_name":"Classical mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/noms56928.2023.10154224","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms56928.2023.10154224","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2023-2023 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"},{"id":"pmh:oai:uni-augsburg.opus-bayern.de:107181","is_oa":false,"landing_page_url":"https://opus.bibliothek.uni-augsburg.de/opus4/frontdoor/index/index/docId/107181","pdf_url":null,"source":{"id":"https://openalex.org/S4306400930","display_name":"OPUS (Augsburg University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I119916105","host_organization_name":"Augsburg University","host_organization_lineage":["https://openalex.org/I119916105"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"doc-type:conferenceobject"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.5299999713897705}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W11783353","https://openalex.org/W1647086144","https://openalex.org/W1966819490","https://openalex.org/W1994926493","https://openalex.org/W2006657731","https://openalex.org/W2040340473","https://openalex.org/W2105545278","https://openalex.org/W2169856608","https://openalex.org/W2287679892","https://openalex.org/W2501671132","https://openalex.org/W2578477250","https://openalex.org/W2581638408","https://openalex.org/W2597306771","https://openalex.org/W2606780536","https://openalex.org/W2782796899","https://openalex.org/W2788163338","https://openalex.org/W2802039533","https://openalex.org/W2887913556","https://openalex.org/W2896320468","https://openalex.org/W2897659885","https://openalex.org/W2901938775","https://openalex.org/W2903038868","https://openalex.org/W2908290213","https://openalex.org/W2920937335","https://openalex.org/W2967436849","https://openalex.org/W2982456741","https://openalex.org/W3008207353","https://openalex.org/W3012379351","https://openalex.org/W3015985777","https://openalex.org/W3033892292","https://openalex.org/W3153738065","https://openalex.org/W3159037623","https://openalex.org/W3187007737","https://openalex.org/W6636548729"],"related_works":["https://openalex.org/W2495628081","https://openalex.org/W2583381754","https://openalex.org/W2361515550","https://openalex.org/W2144255176","https://openalex.org/W4310291187","https://openalex.org/W2393767664","https://openalex.org/W4363647490","https://openalex.org/W2082371893","https://openalex.org/W4240856555","https://openalex.org/W2891274976"],"abstract_inverted_index":{"Software-based":[0],"network":[1,20,84],"security":[2],"solutions":[3],"using":[4],"SDN/NFV":[5],"provide":[6],"high":[7,41,113],"flexibility":[8],"and":[9,104,118,131,147],"short":[10],"development":[11,142],"cycles,":[12],"but":[13],"may":[14],"impose":[15],"a":[16,64,94,164],"bottleneck":[17],"onto":[18],"the":[19,67,76,110,120,133,141,159],"due":[21],"to":[22,38],"their":[23,79,149],"lack":[24],"of":[25,70,78,100,109,135,153,161],"ASIC-based":[26],"hardware":[27],"packet":[28,43,115,137],"processing.":[29],"To":[30],"overcome":[31],"this":[32,90],"limitation,":[33],"several":[34],"frameworks":[35],"have":[36],"emerged":[37],"enable":[39],"flexible":[40],"speed":[42,114],"processing":[44,116,138],"in":[45,57,151,155,163],"software,":[46],"e.g.,":[47,59],"NAPI,":[48],"XDP,":[49],"or":[50,52],"DPDK,":[51],"on":[53],"programmable":[54],"data":[55],"planes":[56],"hardware,":[58],"P4.":[60],"Despite":[61],"aiming":[62],"for":[63,81,107],"common":[65],"goal,":[66],"design":[68],"principles":[69],"these":[71],"technologies":[72,117],"diverge,":[73],"which":[74,97],"raises":[75],"question":[77],"suitability":[80],"critical":[82],"security-related":[83],"functions,":[85],"such":[86],"as":[87],"firewalls.":[88],"In":[89],"work,":[91],"we":[92,145],"implement":[93],"stateful":[95],"firewall,":[96],"is":[98],"capable":[99],"tracking":[101],"TCP":[102],"state":[103],"sequence":[105],"numbers,":[106],"each":[108,136],"four":[111],"aforementioned":[112],"make":[119],"firewall":[121],"modules":[122],"publicly":[123],"available.":[124],"We":[125],"integrate":[126],"multithreading":[127],"strategies,":[128],"where":[129],"applicable,":[130],"discuss":[132],"impact":[134],"technology":[139],"during":[140],"process.":[143],"Finally,":[144],"evaluate":[146],"compare":[148],"performance":[150],"terms":[152],"throughput":[154],"two":[156],"scenarios":[157],"following":[158],"guidelines":[160],"RFC3511":[162],"100":[165],"Gbps":[166],"testbed.":[167]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}