Inferring higher level policies from firewall rules

Proceedings of the 21st Large Installation System Administration Conference, LISA 2007

Volumn , Issue , 2007, Pages 17-26

  Tongaonkar, Alok ^a   Inamdar, Niranjan ^a   Sekar, R ^a  

^a STONY BROOK UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY SYSTEMS;

FILTERING RULES; FIREWALL MANAGEMENT; FIREWALL RULES; PACKET FILTERING; REQUIREMENTS CHANGE; SECURITY POLICY; SYSTEM ADMINISTRATORS; VENDOR SPECIFIC TOOLS;

COMPUTER SYSTEM FIREWALLS;

EID: 77951770753     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. Al-Shaer, Ehab and Hazem Hamed, "Discovery of Policy Anomalies in Distributed Firewalls," IEEE INFOCOM, 2004
2. Bartal, Yair, et al., "Firmato: A Novel Firewall Management Toolkit," IEEE Security and Policy, 1999
3. Firestarter, http://www.fs-security.com
4. Shorewall Firewall, http://www.shorewall.net
5. Golnabi, Korosh, et al., "Analysis of Firewall Policy Rule using Data Mining Techniques," IEEE/ IFIP Network Operations and Management Symposium, 2006
6. Gouda, Mohamed G. and Alex X. Liu, "Firewall Design:Consistency, Completeness, and Compactness," International Conference on Distributed Computing Systems, 2004
7. Mayer, Alain, et al., "Fang: A Firewall Analysis Engine," IEEE Symposium on Security and Privacy, 2000
8. Marmorstein, Robert and Phil Kearns, "Firewall Analysis with Policy-Based Host Classification", 20th Large Installation Systems Administration Conference, 2006
9. Marmorstein, Robert and Phil Kearns, "A Tool for Automated Iptables Firewall Analysis," Freenix Tr a c k , USENIX Annual Technical Conference, 2005
10. Rubin, Aviel, Dan Geer, and Marcus Ranum, Web Security Sourcebook, Wiley Computer Publishing, 1997
11. Tongaonkar, Alok, "Fast Pattern-Matching Techniques for Packet Filtering," Master ?s Thesis Report, Stony Brook University, 2004, http://www. seclab.cs.sunysb.edu/seclab/pubs/theses/alok.pdf
12. Wool, Avishai, "Architecting the Lumeta Firewall Analyzer," 10th USENIX Security Symposium, 2001
13. Yuan, Lihua, et al., "Fireman: A Toolkit for Firewall Modeling and Analysis," IEEE Symposium on Security and Privacy, 2006
14. Eychenne, Herve, iptables Man Page, March, 2002