Complete redundancy detection in firewalls

Lecture Notes in Computer Science

Volumn 3654, Issue , 2005, Pages 193-206

  Liu, Alex X ^a   Gouda, Mohamed G ^a  

^a University of Texas at Austin   (United States)

Author keywords

Firewall; Network Security; Redundant Rules

Indexed keywords

COMPUTER NETWORKS; PACKET NETWORKS; PROBLEM SOLVING; REDUNDANCY; SECURITY SYSTEMS; TREES (MATHEMATICS); COMPUTER SYSTEM FIREWALLS; DECISION TREES; FORESTRY; MOBILE SECURITY; SECURITY OF DATA;

FIREWALLS; NETWORK SECURITY; REDUNDANT RULES; FIREWALL; PRIVATE NETWORKS; SAFETY CRITICAL SYSTEMS; TREE REPRESENTATION;

COMPUTER SYSTEM FIREWALLS; NETWORK SECURITY;

ARTIFICIAL INTELLIGENCE; DECISION MAKING; INFORMATION RETRIEVAL; SAFETY;

EID: 26444606876     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/11535706_15     Document Type: Conference Paper

References (16)

1. ipchains, http://www.tldp.org/howto/ipchains-howto.html.
2. E. Al-Shaer and H. Hamed. Firewall policy advisor for anomaly detection and rule editing. In IEEE/IFIP Integrated Management IM'2003, pages 17-30, March 2003.
3. E. Al-Shaer and H. Hamed. Management and translation of filtering security policies. In IEEE International Conference on Communications, pages 256-260, May 2003.
4. E. Al-Shaer and H. Hamed. Discovery of policy anomalies in distributed firewalls. In IEEE INFOCOM'04, pages 2605-2616, March 2004.
5. Y. Bartal, A. J. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. In Proceeding of the IEEE Symposium on Security and Privacy, pages 17-31, 1999.
6. Y. Bartal, A. J. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. Technical Report EES2003-1, Dept. of Electrical Engineering Systems, Tel Aviv University, 2003.
7. M. Frantzen, F. Kerschbaum, E. Schultz, and S. Fahmy. A framework for understanding vulnerabilities in firewalls using a dataflow model of firewall internals. Computers and Security, 20(3):263-270, 2001.
8. M. G. Gouda and A. X. Liu. Firewall design: consistency, completeness and compactness. In Proceedings of the 24th IEEE International Conference on Distributed Computing Systems (ICDCS'04), pages 320-327.
9. P. Gupta. Algorithms for Routing Lookups and Packet Classification. PhD thesis, Stanford University, 2000.
10. J. D. Guttman. Filtering postures: Local enforcement for global policies. In Proceedings of IEEE Symp. on Security and Privacy, pages 120-129, 1997.
11. S. Hazelhurst, A. Attar, and R. Sinnappan. Algorithms for improving the dependability of firewall and filter rule lists. In Proceedings of the International Conference on Dependable Systems and Networks (DSN'00), pages 576-585, 2000.
12. S. Kamara, S. Fahmy, E. Schultz, F. Kerschbaum, and M. Frantzen. Analysis of vulnerabilities in internet firewalls. Computers and Security, 22(3):214-232, 2003.
13. A. X. Liu and M. G. Gouda. Diverse firewall design. In Proceedings of the International Conference on Dependable Systems and Networks (DSN'04), pages 595-604, June 2004.
14. A. Mayer, A. Wool, and E. Ziskind. Fang: A firewall analysis engine. In Proceedings of IEEE Symp. on Security and Privacy, pages 177-187, 2000.
15. M. H. Overmars and A. F. van der Stappen. Range searching and point location among fat objects. Journal of Algorithms, 21(3):629-656.
16. A. Wool. Architecting the lumeta firewall analyzer. In Proceedings of the 10th USENIX Security Symposium, pages 85-97, August 2001.