Formal approach for managing firewall misconfigurations

Proceedings - International Conference on Research Challenges in Information Science

Volumn , Issue , 2014, Pages

  Saâdaoui, Amina ^a   Souayeh, Nihel Ben Youssef Ben ^a   Bouhoula, Adel ^a  

^a UNIVERSITY OF CARTHAGE   (Tunisia)

Author keywords

Anomalies; automatic resolution; Filtering rules; Firewall configuration; Inference system; Misconfigurations; Security policy

Indexed keywords

INFORMATION SCIENCE; SECURITY SYSTEMS;

ANOMALIES; FILTERING RULES; FIREWALL CONFIGURATION; INFERENCE SYSTEMS; MISCONFIGURATIONS; SECURITY POLICY;

FILTRATION;

EID: 84906739769     PISSN: 21511349     EISSN: 21511357     Source Type: Conference Proceeding    
DOI: 10.1109/RCIS.2014.6861044     Document Type: Conference Paper

References (18)

1. Ehab S. Al-Shaer and H. H. Hamed, "modeling and management of firewall policies," IEEE Transactions on Network and Service Management, vol. 1, no. 1, pp. 2-10, 2004.
2. Thawatchai Chomsiri and C. Pornavalai, "firewall rules analysis," in Security and Management, 2006, pp. 213-219.
3. F. Cuppens, N. Cuppens-Boulahia, and J. Garcia Alfaro, "detection and removal of firewall misconfiguration," in CNIS IASTED, Phoenix, AZ, USA novembre, 2005.
4. Muhammad Abedin, S. Nessa, L. Khan, and B. M. Thuraisingham, "detection and resolution of anomalies in firewall policy rules," in DBSec, 2006, pp. 15-29.
5. B. Khorchani, S. Hall, and R. Villemaire, "firewall anomaly detection with a model checker for visibility logic." in NOMS. IEEE, 2012, pp. 466-469.
6. Naveen Mukkapati and Ch.V.Bhargavi, "detecting policy anomalies in firewalls by relational algebra and raining 2d-box model," IJCSNS International Journal of Computer Science and Network Security, vol. 13, no. 5, pp. 94-99, 2013.
7. Hongxin Hu, G.-J. Ahn, and K. Kulkarni, "detecting and resolving firewall policy anomalies," IEEE Transactions on Dependable and Secure Computing, vol. 9, no. 3, pp. 318-331, 2012.
8. H. Hu, G.-J. Ahn, and k. Kulkarni, "fame: a firewall anomaly management environment." in SafeConfig. ACM, 2010, pp. 17-26. [Online]. Available: http://dblp.unitrier. de/db/conf/safeconfig/safeconfig2010.html
9. (2012) firewall builder. [Online]. Available: http://www.fwbuilder.org/
10. (2012) athena firepac. [Online]. Available: http://www.solarwinds.com/ athena-security-products.aspx
11. Alain Mayer, A. Wool, and E. Ziskind, "fang: A firewall analysis engine," in Proceedings of 2000 IEEE Symposium on Security and Privacy, 2000, pp. 177-187.
12. L. Yuan, J. Mai, Z. Su, H. Chen, C.-N. Chuah, and P. Mohapatra, "fireman: A toolkit for firewall modeling and analysis," in Proceedings of the 2006 IEEE Symposium on Security and Privacy, ser. SP '06. Washington, DC, USA: IEEE Computer Society, 2006, pp. 199-213.
13. Alex X. Liu, "formal verification of firewall policies," in ICC, 2008, pp. 1494-1498.
14. Soutaro Matsumoto and A. Bouhoula, "automatic verification of firewall configuration with respect to security policy requirements," in CISIS, 2008, pp. 123-130.
15. Nihel Ben Youssef, A. Bouhoula, and F. Jacquemard, "automatic verification of conformance of firewall configurations to security policies," in ISCC, 2009, pp. 526-531.
16. Padmalochan Bera, S. K. Ghosh, and P. Dasgupta, "integrated security analysis framework for an enterprise network - a formal approach," IET Information Security, vol. 4, no. 4, pp. 283-300, 2010.
17. P. Bera, S. Ghosh, and P. Dasgupta, "policy based security analysis in enterprise networks: A formal approach," Network and Service Management, IEEE Transactions on, vol. 7, no. 4, pp. 231-243, 2010.
18. (2012) limboole sat solver. [Online]. Available: http://fmv.jku.at/ limboole/index.html