Analysis of policy anomalies on distributed network security setups

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4189 LNCS, Issue , 2006, Pages 496-511

  Alfaro, J G ^a,b   Cuppens, F ^a   Cuppens Boulahia, N ^a  

^a ECOLE DES MINES DE NANTES   (France)

^b UNIVERSITAT AUTÒNOMA DE BARCELONA   (Spain)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; DISTRIBUTED COMPUTER SYSTEMS; INTERNET; PROBLEM SOLVING; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

DISTRIBUTED NETWORKS; NETWORK INTRUSION DETECTION SYSTEMS (NIDS); POLICY ANOMALIES;

SECURITY SYSTEMS;

EID: 33750240265     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11863908_30     Document Type: Conference Paper

References (16)

1. Adiseshu, H., Suri, S., and Parulkar, G. (2000). Detecting and Resolving Packet Filter Conflicts. In 19th Annual Joint Conference of the IEEE Computer and Communications Societies, 1203-1212.
2. Al-Shaer, E. S., Hamed, H. H. (2004). Discovery of Policy Anomalies in Distributed Firewalls. In IEEE INFOCOM'04, March.
3. Al-Shaer, E. S., Hamed, H. H., and Masum, H. (2005). Conflict Classification and Analysis of Distributed Firewall Policies. In IEEE Journal on Selected Areas in Communications, 23(10).
4. Al-Shaer, E. S., Hamed, H. H. (2006). Taxonomy of Conflicts in Network Security Policies. In IEEE Communications Magazine, 44(3), March.
5. Castagnetto, J. et al. (1999). Professional PHP Programming. Wrox Press Inc, ISBN 1-86100-296-3.
6. Cheswick, W. R., Bellovin, S. M., Rubin A. D. (2003). Firewalls and Internet security: repelling the wily hacker. Addison-Wesley, second edition.
7. Cuppens, F., Cuppens-Boulahia, N., and Garcia-Alfaro, J. (2005). Detection and Removal of Firewall Misconfiguration. In Proceedings of the 2005 IASTED International Conference on Communication, Network and Information Security, 154-162.
8. Cuppens, F., Cuppens-Boulahia, N., and Garcia-Alfaro, J. (2005). Misconfiguration Management of Network Security Components. In Proceedings of the 7th International Symposium on System and Information Security, Sao Paulo, Brazil.
9. Gupta, P. (2000). Algorithms for Routing Lookups and Packet Classification. PhD Thesis, Department of Computer Science, Stanford University.
10. Gouda, M. G. and Liu, A. X. (2004). Firewall Design: Consistency, Completeness and Compactness. In 24th IEEE International Conference on Distributed Computing Systems (ICDCS-04), pages 320-327.
11. MITRE Corp. Common Vulnerabilities and Exposures. [Online]. Available from: http://cve.mitre.org/
12. Northcutt, S. (2002). Network Intrusion Detection: An analyst's Hand Book. New Riders Publishing, third edition.
13. Open Security Foundation. Open Source Vulnerability Database. [Online]. Available from: http://osvdb.org/
14. Reed, D. IP Filter. [Online]. Available from: http://www.ja.net/CERT/ Software/ipfilter/ip-filter.html
15. Roesch, M. (1999), Snort: lightweight intrusion detection for networks. In 13th USENIX Systems Administration Conference, Seattle, WA.
16. Welte, H., Kadlecsik, J., Josefsson, M., McHardy, P., and et al. The netfilter project: firewalling, nat and packet mangling for linux 2.4× and 2.6.×. [Online]. Available from: http://www.netfilter.org/