Automatic analysis of firewall and network intrusion detection system configurations

FMSE'04: Proceedings of the 2004 ACM Workshop on Formal Methods in Security Engineering

Volumn , Issue , 2004, Pages 66-74

  Uribe, Tomás E ^a   Cheung, Steven ^a  

^a SRI INTERNATIONAL   (United States)

Author keywords

Firewalls; Formal specification and analysis; Network configuration and security; Network intrusion detection

Indexed keywords

ABSTRACTING; COMPUTER NETWORKS; COSTS; DATA COMMUNICATION SYSTEMS; MATHEMATICAL MODELS; PUBLIC POLICY; SECURITY OF DATA;

FORMAL SPECIFICATION AND ANALYSIS; NETWORK CONFIGURATION AND SECURITY; NETWORK INTRUSION DETECTION SYSTEMS (NIDS); NETWORK OPERATIONS;

COMPUTER SYSTEM FIREWALLS;

EID: 20444432820     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1029133.1029143     Document Type: Conference Paper

References (21)

1. 3Com. 3Com Embedded Firewall. Software for the 3CR990 Network Interface Card (NIC) Family, Dec. 2001.
2. Y. Bartal, A. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. In IEEE Symposium on Security and Privacy, pages 17-31, 1999.
3. R. E. Bryant. Graph-based algorithms for Boolean function manipulation. IEEE Transactions on Computers, C-35(8):677-691, Aug. 1986.
4. J. Burns, A. Cheng, P. Gurung, S. Rajagopalan, P. Rao, D. Rosenbluth, A. Surendran, and J. D.M. Martin. Automatic management of network security policy. In DARPA Information Survivability Conference and Exposition (DISCEX II) Volume 2, pages 1012-1026, Anaheim, California, June 12-14, 2001.
5. A. M. Cheadle, W. Harvey, A. J. Sadler, J. Schimpf, K. Shen, and M. G. Wallace. ECLiPSe: An Introduction. Technical Report IC-Parc-03-1, IC-Parc, Imperial College London, 2003.
6. rd DARPA Information Survivability Conference and Exposition (DISCEX III), pages 284-292, Washington, D.C., Apr. 22-24, 2003.
7. Cisco Systems, Inc. Cisco PIX Firewall and VPN Configuration Guide: Version 6.3, 2003. http://www.cisco.com.
8. E. M. Clarke, O. Grumberg, and D. A. Peled. Model Checking. The MIT Press, Cambridge, Massachusetts, 1999.
9. P. Eronen and J. Zitting. An expert system for analyzing firewall rules. In Proc. 6th Nordic Workshop on Secure IT Systems (NordSec 2001), pages 100-107, Nov. 2001.
10. th International Workshop on Distributed Systems: Operations and Management (DSOM'2001), France, Oct. 15-17, 2001.
11. G. R. Ganger, G. Economou, and S. M. Bielski. Finding and containing enemies within the walls with self-securing network interfaces. Technical Report CMU-CS-03-109, School of Computer Science, Carnegie-Mellon University, Jan. 2003.
12. J. D. Guttman. Filtering postures: Local enforcement for global policies. In IEEE Symposium on Security and Privacy, pages 120-129, Oakland, California, May 1997. Extended version available as MITRE technical report, 1997.
13. J. D. Guttman and A. L. Herzog. Rigorous automated network security management. Technical report, MITRE Corp., Aug. 2003. Preliminary version appeared in Proc. VERIFY 2002.
14. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith. Implementing a distributed firewall. In ACM Conf. on Computer and Communications Security, pages 190-199, 2000.
15. T. Markham and C. Payne. Security at the network edge: A distributed firewall architecture. In DARPA Information Survivability Conference and Exposition (DISCEX II) Volume 1, pages 279-286, Anaheim, California, June 12-14, 2001.
16. A. Mayer, A. Wool, and E. Ziskind. Fang: A firewall analysis engine. In IEEE Symposium on Security and Privacy, pages 177-187, Oakland, California, May 2000.
17. P. Porras and P. Neumann. EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances. In Proceedings of the 20th National Information Systems Security Conference, pages 353-365, Baltimore, MD, Oct. 1997.
18. T. H. Ptacek and T. N. Newsham. Insertion, evasion, and denial of service: Eluding network intrusion detection. Technical report, Secure Networks, Inc., Jan. 1998.
19. M. Roesch. Snort: Lightweight intrusion detection for networks. In USENIX LISA '99, Nov. 1999. www.snort.org.
20. T. E. Uribe, S. Cheung, J. Levy, and A. Valdes. Intrusion tolerance and worm spread. In Fast Abstracts, Dependable Systems and Networks. IEEE, June 2003.
21. A. Wool. Architecting the Lumeta firewall analyzer. In Proc. of the 10th USENIX Security Symposium, Aug. 2001.