TY - GEN
T1 - Enhancing the Security of a Private Network by Using A Multi-level Hierarchical NAT Scheme
AU - Wang, Shie Yuan
AU - Yuan, Yu Hsun
N1 - Publisher Copyright:
© 2022 IEEE.
PY - 2022
Y1 - 2022
N2 - Nowadays, attacks coming from the Internet are posing serious threats to the hosts in an institution, campus, company, etc. The Network Address Translator (NAT) is a device that allows a host in a private network to interact with the hosts on the public Internet. Due to the property of NAT, unless a host that is behind a NAT actively contacts a host on the Internet, hosts on the Internet cannot actively reach the host behind the NAT. In this work, we exploit NATs and propose a multi-level hierarchical NAT scheme to protect and enhance the security of a private network. We have designed and implemented our scheme over P4 programmable hardware switches. Experimental results show that our scheme functions correctly and provides high throughput, low latency, and high stability. In addition, according to our tests, our scheme works correctly with most existing network applications.
AB - Nowadays, attacks coming from the Internet are posing serious threats to the hosts in an institution, campus, company, etc. The Network Address Translator (NAT) is a device that allows a host in a private network to interact with the hosts on the public Internet. Due to the property of NAT, unless a host that is behind a NAT actively contacts a host on the Internet, hosts on the Internet cannot actively reach the host behind the NAT. In this work, we exploit NATs and propose a multi-level hierarchical NAT scheme to protect and enhance the security of a private network. We have designed and implemented our scheme over P4 programmable hardware switches. Experimental results show that our scheme functions correctly and provides high throughput, low latency, and high stability. In addition, according to our tests, our scheme works correctly with most existing network applications.
KW - NAT
KW - Network security
KW - P4
UR - http://www.scopus.com/inward/record.url?scp=85135825704&partnerID=8YFLogxK
U2 - 10.1109/HPSR54439.2022.9831376
DO - 10.1109/HPSR54439.2022.9831376
M3 - Conference contribution
AN - SCOPUS:85135825704
T3 - IEEE International Conference on High Performance Switching and Routing, HPSR
SP - 157
EP - 162
BT - 2022 IEEE 23rd International Conference on High Performance Switching and Routing, HPSR 2022
PB - IEEE Computer Society
T2 - 23rd IEEE International Conference on High Performance Switching and Routing, HPSR 2022
Y2 - 6 June 2022 through 8 June 2022
ER -