A formal approach to specify and deploy a network security policy

IFIP Advances in Information and Communication Technology

Volumn 173, Issue , 2005, Pages 203-218

  Cuppens, F ^a   Cuppens Boulahia, N ^a   Sans, T ^a   Miege A ^a,b  

^a ECOLE DES MINES DE NANTES   (France)

^b TELECOM PARISTECH   (France)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; COMPUTER SYSTEM FIREWALLS; FIRE FIGHTING EQUIPMENT; HIGH LEVEL LANGUAGES; SECURITY SYSTEMS; SEMANTICS;

ACCESS CONTROL LANGUAGE; ACCESS CONTROL MODELS; CONFIGURATION LANGUAGES; FORMAL APPROACH; NETWORK ACCESS CONTROL; NETWORK SECURITY POLICY; TRANSLATION PROCESS; WELL FOUNDED SEMANTICS;

NETWORK SECURITY;

EID: 84890861666     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/0-387-24098-5_15     Document Type: Conference Paper

References (16)

1. Bartal, Y., Mayer, A., Nissim, K., and Wool, A. (1999). Firmato: A novel firewall management toolkit. In 20th IEEE Symposium on Security and Privacy, pages 17-31, Oakland, California.
2. Checkpoint (2004). Firewall-1. In http://www.checkpoint.com/.
3. Cuppens, F., Cuppens-Boulahia, N., and Miège, A. (2004a). Inheritance hierarchies in the Or-BAC Model and application in a network environment. In Second Foundations of Computer Security Workshop (FCS'04), Turku, Finland.
4. Cuppens, F., Cuppens-Boulahia, N., Sans, T., and Migge, A. (2004b). A Formal Approach to Specify and Deploy a Network Security Policy. In http://www.rennes.enst-bretagne.fr/ fcup-pens/articles/fast2004.pdf (full version of the paper presented at FAST 2004).
5. Cuppens, F. and Miège, A. (2003a). Conflict management in the Or-BAC model.
6. Cuppens, F. and Miège, A. (2003b). Modelling contexts in the Or-BAC model. In 19th Annual Computer Security Applications Conference, Las Vegas.
7. Cuppens, F and Miège, A. (2004). Administration Model for Or-BAC. Journal of Computer Systems Science and Engineering (CSSE). To appear.
8. Degu, C. and Bastien, G. (2003). CCP Cisco Secure PIX firewall Advanced Exam Certification Guide.
9. Hassan, A. and Hudec, L. (2003). Role Based Network Security Model: A Forward Step towards Firewall Management. In Workshop On Security of Information Technologies, Algiers.
10. Kalam, A. A. E., Baida, R. E., Balbiani, P., Benferhat, S., Cuppens, F., Deswarte, Y., Miège, A., Saurel, C., and Trouessin, G. (2003). Organization Based Access Control. In Proceedings of IEEE 4th International Workshop on Policies for Distributed Systems and Networks (POLICY 2003), Lake Come, Italy.
11. Kurland, V. (2003). Firewall Builder. White paper.
12. Mayer, A., Wool, A., and Ziskind, E. (2000). Fang: A Firewall Analysis Engine. In 21th IEEE Symposium on Security and Privacy, pages 177-187, Oakland, California.
13. Russell, R. (2002). Linux 2.4 Packet Filtering. In http://www.netfilter.Org/documentation/HOWTO//packet-filtering-HOWTO.html.
14. Sandhu, R., Coyne, E. J., Feinstein, H. L., and Youman, C. E. (1996). Role-Based Access Control Models. IEEE Computer, 29(2):38-47.
15. Tsaousis, C. (2004). FireHOL, R5 VI. 159. In http://firehol.sourceforge.net/.
16. W3C (2004). Extensible Markup Language (XML) 1.0 (Third Edition). In http://www.w3.org/TR/REC-xml/.