Executing Firewalls In Public Clouds

A firewall system is a packet filter that is placed at the entry point of an enterprise network to examine the packets that attempt to enter the network and decide whether to accept or reject these packets. To simplify the architecture of the firewall system, part of the functionality of the system is outsourced to a public cloud. Unfortunately, public clouds are unreliable and using them to execute part of the functionality of the firewall system makes the system vulnerable to two types of attacks: verifiability attacks and privacy attacks. Prior work in this area yielded outsourced firewall systems that can defend against verifiability attacks or privacy attacks but do not defend against both attacks. In this paper, we present an outsourced firewall system that can defend against these two types of attacks.