Modeling and Management of Firewall Policies

IEEE Transactions on Network and Service Management

Volumn 1, Issue 1, 2004, Pages 2-10

  Al Shaer, Ehab S ^a   Hamed, Hazem H ^a  

^a DEPAUL UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85008057842     PISSN: 19324537     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNSM.2004.4623689     Document Type: Article

References (20)

1. E. Al-Shaer and H. Hamed, “Firewall Policy Advisor for Anomaly Detection and Rule Editing,” Proc. IEEE/IFIP Integrated Management Conf. (IM'2003), Mar. 2003.
2. L. Qiu, G. Varghese, and S. Suri, “Fast Firewall Implementations for Software and Hardware-Based Routers,” Proc. 9th Int'l. Conf. Network Protocols (ICNP 2001), Nov. 2001.
3. V. Srinivasan, S. Suri, and G. Varghese, “Packet Classification Using Tuple Space Search,” Computer ACM SIGCOMM Commun. Rev., Oct. 1999.
4. T. Woo, “A Modular Approach to Packet Classification: Algorithms and Results,” Proc. IEEE INFOCOM '00, Mar. 2000.
5. D. Eppstein and S. Muthukrishnan, “Internet Packet Filter Management and Rectangle Geometry,” Proc. 12th Annual ACM-SIAM Symp. Discrete Algorithms (SODA), Jan. 2001.
6. B. Hari, S. Suri, and G. Parulkar, “Detecting and Resolving Packet Filter Conflicts,” Proc. IEEE INFOCOM '00, Mar. 2000.
7. Y. Bartal et al., “Firmato: A Novel Firewall Management Toolkit,” Proc. 1999 IEEE Symp. Security and Privacy, May 1999.
8. A. Mayer, A. Wool, and E. Ziskind, “Fang: A Firewall Analysis Engine,” Proc. 2000 IEEE Symp. Security and Privacy, May 2000.
9. A. Wool, “Architecting the Lumeta Firewall Analyzer,” Proc. 10th USENIX Security Symp., Aug. 2001.
10. D. Chapman and E. Zwicky, Building Internet Firewalls, 2nd Ed., Orielly & Associates Inc., 2000.
11. W. Cheswick and S. Belovin, Firewalls and Internet Security, Addison-Wesley, 1995.
12. S. Cobb, “ICSA Firewall Policy Guide v2.0,” NCSA Security White Paper Series, 1997.
13. J. Wack, K. Cutler, and J. Pole, “Guidelines on Firewalls and Firewall Policy,” NIST Recommendations, SP 800–41, Jan. 2002.
14. E. Al-Shaer and H. Hamed, “Design and Implementation of Firewall Policy Advisor Tools,” DePaul CTI Technical Report, CTI-TR-02-006, Aug. 2002.
15. R. Panko, Corporate Computer and Network Security, Prentice Hall, 2003.
16. S. Hazelhurst, “Algorithms for Analyzing Firewall and Router Access Lists,” Technical Report TR-WitsCS-1999, Dept. of Computer Science, University of the Witwatersrand, South Africa, July 1999.
17. M. Gouda and X. Liu, “Firewall Design: Consistency, Completeness, and Compactness,” Proc. 24th IEEE Int'l. Conf. Distributed Computing Systems (ICDCS'04), March 2004.
18. E. Lupu and M. Sloman, “Conflict Analysis for Management Policies,” Proc. IFIP/IEEE Int'l. Symp. Integrated Network Management (IM 1997), May 1997.
19. Z. Fu et al, “IPSec/VPN Security Policy: Correctness, Conflict Detection, and Resolution,” Proc. Policy’2001 Wksp., Jan/ 2001.
20. P. Eronen and J. Zitting, “An Expert System for Analyzing Firewall Rules,” Proc. 6th Nordic Wksp. Secure IT-Systems (NordSec 2001), Nov/ 2001.