Firewall design: Consistency, completeness, and compactness

Proceedings - International Conference on Distributed Computing Systems

Volumn 24, Issue , 2004, Pages 320-327

  Gouda, Mohamed G ^a   Liu, Xiang Yang Alex ^a  

^a University of Texas at Austin   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; DECISION MAKING; INTERFACES (COMPUTER); INTERNET; NETWORK PROTOCOLS; PACKET NETWORKS; SERVERS;

FIREWALL DECISION DIAGRAM (FDD); PRIVATE NETWORKS; REDUCTION ALGORITHMS;

COMPUTER SYSTEM FIREWALLS;

EID: 2442419072     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icdcs.2004.1281597     Document Type: Conference Paper

References (13)

1. High level firewall language, http://www.hlfl.org/.
2. F. Baboescu and G. Varghese. Fast and scalable conflict detection for packet classifiers. In Proc. of the 10th IEEE International Conference on Network Protocols, 2002.
3. Y. Bartal, A. J. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. In Proc. of IEEE Symp. on Security and Privacy, pages 17-31, 1999.
4. A. Begel, S. McCanne, and S. L. Graham. BPF+: Exploiting global data-flow optimization in a generalized packet filter architecture. In Proc. of ACM SIGCOMM '99, 1999.
5. R. E. Bryant. Graph-based algorithms for boolean function manipulation. IEEE Trans. on Computers, 35(8):677-691, 1986.
6. M. M. Buddhikot, S. Suri, and M. Waldvogel. Space decomposition techniques for fast Layer-4 switching. In Proc. of PHSN, Aug. 1999.
7. D. Eppstein and S. Muthukrishnan. Internet packet filter management and rectangle geometry. In Symp. on Discrete Algorithms, pages 827-835, 2001.
8. A. Feldmann and S. Muthukrishnan. Tradeoffs for packet classification. In Proc. of 19th IEEE INFOCOM, Mar. 2000.
9. P. Gupta and N. McKeown. Algorithms for packet classification. IEEE Network, 15(2):24-32, 2001.
10. J. D. Guttman. Filtering postures: Local enforcement for global policies. In Proc. of IEEE Symp. on Security and Privacy, pages 120-129, 1997.
11. A. Hari, S. Suri, and G. M. Parulkar. Detecting and resolving packet filter conflicts. In Proc. of IEEE Infocom, pages 1203-1212, 2000.
12. V. Srinivasan, G. Varghese, S. Suri, and M. Waldvogel. Fast and scalable layer four switching. In Proc. of ACM SIGCOMM, pages 191-202, 1998.
13. K. Strehl and L. Thiele. Interval diagrams for efficient symbolic verification of process networks. IEEE Trans. on Computer-Aided Design of Integrated Circuits and Systems, 19(8):939-956, 2000.