Taxonomy of conflicts in network security policies

IEEE Communications Magazine

Volumn 44, Issue 3, 2006, Pages 134-141

  Hamed, Hazem ^a   Al Shaer, Ehab ^a  

^a DEPAUL UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; DATA COMMUNICATION SYSTEMS; INTERNET; SEMANTICS; TELECOMMUNICATION TRAFFIC;

NETWORK SECURITY POLICIES; TAXONOMY; TRAFFIC FILTERING;

SECURITY OF DATA;

EID: 33645337636     PISSN: 01636804     EISSN: None     Source Type: Journal    
DOI: 10.1109/MCOM.2006.1607877     Document Type: Article

References (10)

1. A. Mayer, A. Wool, and E. Ziskind, "Fang: A Firewall Analysis Engine," Proc. 2000 IEEE Symp. Security and Privacy, May 2000.
2. Z. Fu et al., "IPSec/VPN Security Policy: Correctness, Conflict Detection and Resolution," Proc. Policy 2001 Wksp., Jan. 2001.
3. K. Jason, L. Rafalow, and E. Vyncke, "IPSec Configuration Policy Information Model," IETF RFC 3585, Aug. 2003.
4. "Configuring IPSec Network Security," Cisco IOS Security Configuration Guide, Rel. 12.2, Cisco Systems, Inc.
5. S. Kent and R. Atkinson, "Security Architecture for the Internet Protocol," IETF RFC 2401, Nov. 1998.
6. H. Hamed, E. Al-Shaer, and W. Marrero, "Modeling and Verification of IPSec and VPN Security Policies," Proc. IEEE ICNP '05, Nov. 2005.
7. R. Bryant, "Graph-Based Algorithms for Boolean Function Manipulation," IEEE Trans. Comp., Aug. 1986.
8. E. Al-Shaer and H. Hamed, "Discovery of Policy Anomalies in Distributed Firewalls," Proc. IEEE INFOCOM '04, Mar. 2004.
9. B. Hari, S. Suri, and G. Parulkar, "Detecting and Resolving Packet Filter Conflicts," Proc. IEEE INFOCOM'00, Mar. 2000.
10. E. Lupu and M. Sloman, "Conflict Analysis for Management Policies," Proc. IFIP/IEEE Int'l. Symp. Integrated Network Mgmt., May 1997.