Security & Privacy
Packet filtering
ActivePublished
Key
innovation
Controlling network traffic by rules on packet headers, reducing a device's attack surface.
Category
Security & Privacy
Abstraction level
Building block
Operation level
SystemDeployment
How it works
A packet-filtering firewall inspects each packet's headers and compares them with a rule list (allow/deny). Packets not matching allowed rules are dropped. Stateless versions evaluate packets individually, while stateful ones track connection context, allowing more precise traffic control.
Problem solved
Devices connected to an industrial network are exposed to unauthorized access and network attacks; a mechanism is needed to restrict with whom and how a device may communicate.