Modeling and verification of IPSec and VPN security policies

Proceedings - International Conference on Network Protocols, ICNP

Volumn 2005, Issue , 2005, Pages 269-278

  Hamed, Hazem ^a   Al Shaer, Ehab ^a   Marrero, Will ^a  

^a DEPAUL UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNICATION SYSTEMS; INTERNET; NETWORK PROTOCOLS; PUBLIC POLICY; SEMANTICS; TELECOMMUNICATION TRAFFIC;

AUTOMATED ANALYSIS; INTERNET COMMUNICATIONS; IPSEC GATEWAYS; TRAFFIC INTEGRITY;

SECURITY OF DATA;

EID: 33744518446     PISSN: 10921648     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNP.2005.25     Document Type: Conference Paper

References (21)

1. E. Al-Shaer and H. Hamed. Discovery of policy anomalies in distributed firewalls. In IEEE INFOCOM'04, March 2004.
2. E. Al-Shaer and H. Hamed. Modeling and management of firewall policies. IEEE eTransactions on Network and Service Management (eTNSM), 1(1), April 2004.
3. th Usenix UNIX Security Symposium, July 1996.
4. R. Bryant. Graph-based algorithms for Boolean function manipulation. IEEE Transactions on Computers, C-35(8):677-691, August 1986.
5. 20 states and beyond. Journal of Information and Computation, 98(2), 1992.
6. Cisco Systems. Configuring IPSec network security. In Cisco IOS Security Configuration Guide, Release 12.2, 2003.
7. N. Doraswamy and D. Harkins. IPSec: The New Security Standard/or the Internet, Intranets, and Virtual Private Networks. Prentice Hall PTR, second edition, March 2003.
8. th ACM Symposium on Discrete Algorithms (SODA '01), January 2001.
9. th Nordic Workshop on Secure Systems, November 2001.
10. Z. Fu, F. Wu, H. Huang, K. Loh, F. Gong, I. Baldine, and C. Xu. IPSec/VPN security policy: Correctness, conflict detection and resolution. In Policy'2001 Workshop, January 2001.
11. th IEEE Int. Conference on Distributed Computing Systems (ICDCS'04), March 2004.
12. P. Gupta and N. McKeown. Algorithms for packet classification. IEEE Network, 15(2):24-32, 2001.
13. H. Hamed, E. Al-Shaer, and W. Marrero. Design and implementation of security policy advisor tools. Technical Report CTI-TR-05-010, DePaul University, May 2005.
14. B. Hari, S. Suri, and G. Parulkar. Detecting and resolving packet filter conflicts. In IEEE INFOCOM'00, March 2000.
15. S. Hazelhurst, A. Attar, and R. Sinnappan. Algorithms for improving the dependability of firewall and filter rule lists. In IEEE Workshop on Dependability of IP Applications, Platforms and Networks, June 2000.
16. K. Jason, L. Rafalow, and E. Vyncke. IPsec configuration policy information model. IETF RFC-3585, August 2003.
17. S. Kent and R. Atkinson. Security architecture for the internet protocol. IETF RFC-2401, November 1998.
18. J. Lind-Nielsen. The buddy obdd package, http://www.bdd-portal.org/buddy. html.
19. th Annual IFIP Conference on Data and Applications Security, August 2005.
20. E. Lupu and M. Sloman. Conflict analysis for management policies. In IFIP/IEEE International Symposium on Integrated Network Management (IM'97), May 1997.
21. A. Mayer, A. Wool, and E. Ziskind. Fang: A firewall analysis engine. In IEEE Symposium on Security and Privacy (SSP'00), May 2000.