To combat security risks to their computer systems and networks, many companies have implemented individual measures and devices to boost protection of their online assets. However, a series of security measures that don’t interact smoothly or fail to configure properly can cause a wide variety of problems for a business – from wasted money and resources to increased vulnerability to outside attacks.

Two researchers from DePaul University’s School of Computer Science, Telecommunications and Information Systems (CTI) are seeking solutions to these problems, and recently received a $457,000 grant from the National Science Foundation (NSF) to further their research.

DePaul CTI associate professors Ehab Al-Shaer and Will Marrero will analyze how multiple tools and security devices, such as firewalls, routers and internet protocol systems that recognize encrypted data, can be unified and configured to create an effective, coordinated security plan. The overall goal is to provide a framework that can be used to analyze global behavior of a network when viewed through the lens of policies of network security and performance.

These issues can have an impact on any business that relies on a computer network, the researchers said. Poorly structured or configured security schemes can result in small problems like slow response and access issues for employees and large problems like higher overhead costs due to unnecessary traffic and increased bandwidth usage, or compromised data due to vulnerable points in the firewall.

According to Marrero, the broad-based view of this issue is urgently needed.

“Many of these devices can be studied and analyzed in isolation,” he noted. “However, the properties you want – security, performance, efficiency – concern all of the devices considered as a whole. We are trying to provide a framework in which this analysis can take place.”

The three-year study also will address issues of traffic and network latency. Latency refers to delays in response time for a particular system or application. In Web applications where timing is critical, a problem with network latency can create difficulties for the end user.

“At the end of the day, we are trying to make a network administrator’s job easier, as well as making them more effective and efficient,” Marrero said.

DePaul has long been a leader in the field of cyber security. In 2005, the university was named a National Center for Academic Excellence in Information Assurance by the National Security Agency (NSA) and the U.S. Department of Homeland Security.

DePaul CTI is one of the most innovative and wide-ranging information technology and digital cinema schools in the country. The undergraduate programs enroll 1,125 students and offer 14 different degrees. Approximately 2,000 students are enrolled in its 18 graduate programs. CTI also features a doctoral degree program in computer science. For more information, visit www.cti.depaul.edu.