Systematic structural testing of firewall policies

Proceedings of the IEEE Symposium on Reliable Distributed Systems

Volumn , Issue , 2008, Pages 105-114

  Hwang, Jeehyun ^a   Xie, Tao ^a   Chen, Fei ^b   Liu, Alex X ^b  

^a North Carolina State University

^b Michigan State University

Author keywords

[No Author keywords available]

Indexed keywords

ADOPTED TECHNOLOGIES; COVERAGE CRITERIONS; DETECTION CAPABILITIES; ENTERPRISE SECURITIES; FIREWALL POLICIES; GENERATION TECHNIQUES; GLOBAL CONSTRAINTS; LOCAL CONSTRAINTS; PRIVATE NETWORKS; QUALITY OF PROTECTIONS;

COMPUTER NETWORKS; COMPUTER VIRUSES; EXPERIMENTS; FAULT DETECTION; TEST FACILITIES; VIBRATION MEASUREMENT;

COMPUTER SYSTEM FIREWALLS;

EID: 58149092995     PISSN: 10609857     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SRDS.2008.34     Document Type: Conference Paper

References (16)

1. OASIS extensible Access Control Markup Language (XACML). http: //www .oasis-open, org/committees/xacml/, 2007.
2. E. Al-Shaer and H. Hamed. Discovery of policy anomalies in distributed firewalls. In Proc. 23rd Conf. IEEE Communications Soc., pages 2605-2616, 2004.
3. P. Ammann, J. Offutt, and H. Huang. Coverage criteria for logical expressions. In Proc. 14th International Symposium on Software Reliability Engineering, pages 99-107, 2003.
4. R. A. DeMillo, R. J. Lipton, and F. G. Sayward. Hints on test data selection: Help for the practicing programmer. IEEE Computer, 11(4):34-41, April 1978.
5. A. El-Atawy, T. Samak, Z. Wali, E. Al-Shaer, F. Lin, C. Pham, and S. Li. An automated framework for validating firewall policy enforcement. In Proc. 8th IEEE International Workshop on Policies for Distributed Systems and Networks, pages 151-160, 2007.
6. M. G. Gouda and A. X. Liu. A model of stateful firewalls and its properties. In Proc. International Conference on Dependable Systems and Networks, pages 128-137, 2005.
7. D. Hoffman and K. Yoo. Blowtorch: a framework for firewall test automation. In Proc. 20th IEEE/ACM international Conference on Automated software engineering, pages 96 103, 2005.
8. J. Jürjens and G. Wimmel. Specification-based testing of firewalls. In Proc. 4th International Andrei Ershov Memorial Conference on Perspectives of System Informatics, pages 308-316, 2001.
9. A. X. Liu, M. G. Gouda, H. H. Ma, and A. H. Ngu. Non-intrusive testing of firewalls. In Proc. 1st International Computer Engineering Conference, pages 196-201, 2004.
10. S. W. Lodin and C. L. Schuba. Firewalls fend off invasions from the net. IEEE Spectr., 35(2):26-34, 1998.
11. M. R. Lyu and L. K. Y. Lau. Firewall security: Policies, testing and performance evaluation. In Proc. 24th International Conference on Computer Systems and Applications, pages 116-121, 2000.
12. E. Martin and T. Xie. A fault model and mutation testing of access control policies. In Proc. 16th International Conference on World Wide Web, pages 667-676, 2007.
13. E. Martin, T. Xie, and T. Yu. Defining and measuring policy coverage in testing access control policies. In Proc. 8th International Conference on Information and Communications Security, pages 139-158, 2006.
14. A. Wool. A quantitative study of firewall configuration errors. Computer, 37(6):62-67, 2004.
15. L. Yuan, J. Mai, Z. Su, H. Chen, C.-N. Chuah, and P. Mohapatra. FIREMAN: A toolkit for FIREwall Modeling and ANalysis. In Proc. IEEE Symposium on Security and Privacy, pages 199-213, 2006.
16. H. Zhu, P. A. V. Hall, and J. H. R. May. Software unit test coverage and adequacy. ACM Comput. Surv., 29(4):366-427, 1997.