Yu, MinlanPedersen, Alexander Scott2023-07-0620232023-06-302023Pedersen, Alexander Scott. 2023. Implementing Adaptive Cuckoo Firewall for Programmable Switch. Bachelor's thesis, Harvard College.30315481https://nrs.harvard.edu/URN-3:HUL.INSTREPOS:37376420Stateful firewalls are a critical security function in many networks. To implement a faster stateful firewall using high-speed programmable switch and support a large number of connections, we need to avoid the memory footprint of storing full 5-tuples. We store shorter hash digests in switch memory, while mitigating the effect of false positives by applying adaptations. We present a stateful firewall implementation on programmable switches, as well as design choices and benchmarks for adapting to false positives using cuckoo filters.application/pdfenNetworkingSystemsComputer scienceThesis or Dissertation2023-07-06