Specifications of a high-level conflict-free firewall policy language for multi-domain networks

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2007, Pages 185-194

  Zhang, Bin ^a   Al Shaer, Ehab ^a   Jagadeesan, Radha ^a   Riely, James ^a   Pitcher, Corin ^a  

^a DEPAUL UNIVERSITY   (United States)

Author keywords

Conflicts free; Firewall; Policy language

Indexed keywords

COMPUTER NETWORKS; HIGH LEVEL LANGUAGES; INFORMATION MANAGEMENT; NETWORK SECURITY; OBJECT ORIENTED PROGRAMMING;

MULTI-DOMAIN NETWORKS; POLICY LANGUAGES;

COMPUTER SYSTEM FIREWALLS;

EID: 34548020563     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1266840.1266871     Document Type: Conference Paper

References (21)

1. Ehab Al-Shaer and Hazem Hamed, Discovery of Policy Anomalies in Distributed Firewalls,In Proceedings of IEEE INFOCOM'04, March 2004
2. Ehab Al-Shaer and Hazem Hamed, Taxonomy of Conflicts in Network Security Policies, IEEE Communications Magazine, Vol. 44, No. 3, March 2006
3. BitTorrent http://www.bittorrent.com/
4. Y. Bartal., A. Mayer, K. Nissim and A. Wool. Firmato: A Novel Firewall Management Toolkit. Proceedings of 1999 IEEE Symposium on Security and Privacy, May 1999.
5. Ian Foster The Grid: Blueprint for a New Computing Infrastructure Morgan Kaufmann, 2004.
6. M. Greenwald, S. Singhal, J. Stone, and D. Cheriton. Designing an Academic Firewall. Policy, Practice and Experience with SURF. Proc. of Network and Distributed System Security Symposium (NDSS), pages 79''C91, February 1996.
7. Greg Graham, Richard Cavanaugh, Peter Couvares, Alan De Smet, and miron Livny Distributed Data Analysis: Federated Computing for High-Energy Physics The Grid: Blueprint for a New Computing Infrastructure, 2004.
8. Hazem Hamed, Ehab Al-Shaer and Will Marrero, Modeling and Verification of IPSec and VPN Security Policies. In Proceedings of IEEE ICNP'2005, November 2005.
9. Hazem Hamed and Ehab Al-Shaer, Dynamic Rule-ordering Optimization for High-speed Firewall Filtering, ACM Symposium on InformAtion, Computer and Communications Security (ASIACCS'06), March 2006.
10. D. Harkins, D. Carrel, The Internet Key Exchange (IKE) RFC 2409, 1998
11. J. D. Howard. An Analysis Of Security On The Internet 1989-1995. PhD thesis, Carnegie Mellon University, April 1997
12. High Level Firewall Language http://www.hlfl.org/
13. The INSPECT Language guide http://www.security-gurus.de/papers
14. IPtables http://www.netfilter.org/
15. S. Ioannidis, A. Keromytis, S. Bellovin, and J. Smith. Implementing Distributed Firewall. Proceedings of Computer and Communications Security (CCS), pages 190'' C199, November 2000.
16. NetSPoC: a Network Security Policy Compiler http://netspoc.berlios. de
17. D. Nessett and P. Humenn. The Multilayer Firewall. Proc. of Network and Distributed System Security Symposium (NDSS), pages 13''C27, March 1998.
18. Squid Web Proxy Cache http ://www.squid-cache.org/
19. Tatu Ylönen SSH - secure login connections of the internet. In Proceedings of the Sixth USENIX Security Symposium, San Jose, California, USA, July 1996.
20. World of Warcraft http://www.worldofwarcraft.com/
21. Charles C. Zhang, Marianne Winslett and Carl A. Gunter. On the Safety and Efficiency of Firewall Policy Deployment Proc. of IEEE Symposium on Security and Privacy, May 2007.