PolicyVis: Firewall security policy visualization and inspection

Proceedings of the 21st Large Installation System Administration Conference, LISA 2007

Volumn , Issue , 2007, Pages 1-16

  Tran, Tung ^a   Al Shaer, Ehab ^a   Boutaba, Raouf ^a  

^a UNIVERSITY OF WATERLOO   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SYSTEM FIREWALLS; INSPECTION; SEMANTICS;

DISTRIBUTED FIREWALL; ERROR PRONE TASKS; FIREWALL POLICIES; FIREWALL RULES; LOW LEVEL REPRESENTATION; MISCONFIGURATIONS; NETWORK VULNERABILITY; SECURITY POLICY;

NETWORK SECURITY;

EID: 85028538564     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Al-Shaer, E., H. Hamed, and R. Boutaba, M. Hasan, "Conflict Classification and Analysis of Distributed Firewall Policies," IEEE Journal of Selected Areas of Communications (JSAC), 2005
2. Al-Shaer, E. and Hazem Hamed, "Discovery of Policy Anomalies in Distributed Firewalls," Proceedings of IEEE INFOCOM?04, March, 2004
3. Becker, R. A., S. G. Eick, and A. R. Wilks, "Visualizing Network Data," IEEE Transactions on Visualization and Computer Graphics, pp. 16-28, 1995
4. Bethel, E. W., S. Campbell, E. Dart, K. Stockinger, and K. Wu, "Accelerating Network Traffic Analysis Using Query-Driven Visualization," IEEE Symposium on Visual Analytics Science and Technology, IEEE Computer Society Press, 2006
5. El-Atawy, A., K. Ibrahim, H. Hamed, and E. Al-Shaer, "Policy Segmentation for Intelligent Firewall Testing," 1st Workshop on Secure Network Protocols (NPSec 2005), November, 2005
6. Eppstein, D. and S. Muthukrishnan, "Internet Packet Filter Management and Rectangle Geometry." Proceedings of 12th Annual ACM-SIAM Symposium on Discrete Algorithms (SODA), January, 2001
7. Gilbert, David and Thomas Morgner, JFree-Chart, Java Chart Library, http://www.jfree.org/ jfreechart/
8. Goodall, John, Wayne Lutters, Penny Rheingans, and Anita Komlodi, "Preserving the Big Picture: Visual Network Traffic Analysis with TNV," Proceedings of the 2005 Workshop on Visualization for Computer Security, pp. 47-54, October, 2005
9. Hamed, Hazem, Ehab Al-Shaer and Will Marrero, "Modeling and Verification of IPSec and VPN Security Policies," Proceedings of IEEE ICNP?2005, November, 2005
10. Hari, B., S. Suri, and G. Parulkar, "Detecting and Resolving Packet Filter Conflicts." Proceedings of IEEE INFOCOM?00, March, 2000
11. Lakkaraju, K., R. Bearavolu, and W. Yurcik, " N VisionIP ? A Traffic Visualization Tool for Large and Complex Network Systems," International Multiconference on Measurement, Modelling, and Evaluation of Computer-Communication Systems (Performance TOOLS), 2003
12. Lee, Chris P., Jason Trost, Nicholas Gibbs, Raheem Beyah, John A. Copeland, "Visual Firewall: Real-Time Network Security Monitor," Proceedings of the IEEE Workshops on Visualization for Computer Security, p. 16, October 26-26, 2005
13. Liu, A. X., M. G. Gouda, H. H. Ma, and A. H. Ngu, "Firewall Queries," Proceedings of the 8th International Conference on Principles of Distributed Systems, LNCS 3544, T. Higashino Ed., Springer-Verlag, December, 2004
14. Le Malécot, E., M. Kohara, Y. Hori, and K. Sakurai, "Interactively combining 2D and 3D visualization for network traffic monitoring," Proceedings of the 3rd ACM international Workshop on Visualization For Computer Security, November 3, 2006
15. McPherson, J., K. L. Ma, P. Krystosk, T. Bartoletti, and M. Christensen, "PortVis: A Tool for Port-Based Detection of Security Events," Proceedings of CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/ DMSEC), October, 2004
16. Nidhi, Sharma, FireViz: A Personal Firewall Visualizing Tool, Thesis (M. Eng.), Massachusetts Institute of Technology, Dept. of Electrical Engineering and Computer Science, 2005
17. Lind-Nielsen, J., The Buddy obdd Package, http:// www.bddportal.org/buddy.html
18. Wool, A., "Architecting the Lumeta Firewall Analyzer," Proceedings of 10th USENIX Security Symposium, August, 2001
19. Tufin SecureTrack: Firewall Operations Management Solution, http://www.tufin.com