Automatic management of network security policy

Proceedings - DARPA Information Survivability Conference and Exposition II, DISCEX 2001

Volumn 2, Issue , 2001, Pages 12-26

  Burns, J ^a   Cheng, A ^a   Gurung, P ^a   Rajagopalan, S ^a   Rao, P ^a   Rosenbluth, D ^a   Surendran, A V ^a   Martin, D M ^b  

^a TELCORDIA TECHNOLOGIES   (United States)

^b UNIVERSITY OF DENVER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ENGINES; NETWORK LAYERS; NETWORK MANAGEMENT; SECURITY SYSTEMS;

AUTOMATIC MANAGEMENT; COMPUTATIONAL COSTS; DESIGN CONSIDERATIONS; DYNAMIC COALITIONS; IN-NETWORK MANAGEMENT; MULTI-LAYER NETWORK; NETWORK SECURITY POLICY; POLICY ENFORCEMENT;

NETWORK SECURITY;

EID: 84964467772     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2001.932156     Document Type: Conference Paper

References (23)

1. J. Anderson, S. Brand, L. Gong, T. Haigh, S. Lipner, T. Lunt, R. Nelson, W. Neugent, H. Orman, M. Ranum, R. Schell, and E.. Spafford. Firewalls: An Expert Roundtable. IEEE Software 14 (5): 60-66 (1997).
2. Y. Bartal, A. Mayer, K. Nissim, and A. Wool. Firmato: A Novel Firewall Management Toolkit. IEEE Symposium on Security and Privacy 1999: 17-31.
3. M. Blaze, J. Feigenbaum, and J. Ioannidis. The KeyNote Trust Management System Version 2. Network Working Group RFC 2704. http://www.crypto.com/papes/rfc2704.txt.
4. th USENIX Security Symposium (SECURITY- 98), pages 1-14.
5. J. Chomicki, J. Lobo, and S. Naqvi. Axiomatic conflict resolution in policy management. Technical Report ITD-99-36448R, Bell Labs, February 1999.
6. J. Guttman. Filtering Postures: Local Enforcement for Global Policies. Proceedings of the 1997 IEEE Symposium on Security and Privacy.
7. S. Hambridge, C. Smothers, T. Oace and J. Sedayao. Just Type Make! Managing Internet Firewalls Using Make and other Publicly Available Utilities. USENIX Proceedings of the First Conference on Network Administration, 1999.
8. A. Keromytis and J. Wright. Transparent Network Security Policy Enforcement.
9. rd Int. Workshop on Services in Distributed and Networked Environments (SDNE'96), Macau, June 1996.
10. A. Mayer, A. Wool, and E. Ziskind. Fang: A Firewall Analysis Engine. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, 2000.
11. M. Miller and J. Morris. Centralized Administration of Distributed Firewalls. USENIX LISA X, 1996.
12. D. Mitton et al. Authentication, Authorization, and Accounting Protocol Evaluation. http://www.ietf.org/internet-drafts/draft-ietf-aaa-proto-eval-02.txt.
13. Cisco PIX firewall series and stateful firewall security. White paper 1997. http://www.cisco.com/warp/public/751/pix/nat-wp-pdf.
14. P. Rao, K. Sagonas, T. Swift, D. Warren and J. Freire. XSB - A System for Efficiently Computing Well Founded Semantics. Conference on Logic Programming and Non Monotonic Reasoning (LPNMR'97), 1997. http://www.cs.sunysb.edu/~prasad/papers/system.ps.
15. A. Rubin and D. Greer. A survey of Web Security. IEEE Computer 31 (9): 33-41-1998.
16. F. Schneider. Enforceable Security Policies. Manuscript. 1992.
17. M. Sloman, N. Dulay and B. Nuseibeh. SecPol: Specification and Analysis of Security Policy for Distributed Systems, EPSRC Grant GR/I 96103. http://www-dse.doc.ic.ac.uk/projects/secpol/SecPol-overview.html.
18. M. Stevens, W. Weiss, M. Mahon, B. Moore, J. Strassner, G. Waters, A. Westerinen and J. Wheeler. Policy Framework, IETF Policy Working Group, http://www.ietf.org/internet-drafts/draft-ietf-policy-framework-00.txt, 1999.
19. Cisco Systems. Cisco IOS 12.0 Network Security. Cisco Press; ISBN: 1578701600.
20. R. Wies. Policies in Network and Systems Management - Formal definition and architecture. Journal of Systems and Network Management Vol 2 no. 1., pp 63-83, 1994.
21. Y. Yemini, A.V. Konstantinou, and D.Florissi. Nestor: An architecture for self-management and organization. Tech. Rep. Dept. of Computer Science, Columbia University, Sept. 1999. http://www.cs.columbia.edu/dcc/nestor/.
22. J. Zao, L. Sanchez, M. Condell, C. Lynn, S. Kent. Domain Based Internet Security Policy Management. In 2000 DARPA Information Survivability Conference and Exposition. (Now appearing in IETF as http://www.ietf.org/internet-drafts/draft-ietf-ipsp-spsl-00.txt.)
23. J. Zao. A Survey of Policy Problem Space. Presentation at the IA Policy workshop. Washington, D.C., October 14, 1999.