Architecting the lumeta firewall analyzer

Proceedings of the 10th USENIX Security Symposium

Volumn , Issue , 2001, Pages

  Wool, Avishai ^a  

^a Lumeta Corporation   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY; WEBSITES;

ANALYSIS SYSTEM; CONFIGURATION FILES; DRILL-DOWN; HUMAN INTERACTIONS; PROTOTYPE SYSTEM; ROUTING TABLE; SECURITY PRACTICE; USABILITY PROBLEMS;

COMPUTER SYSTEM FIREWALLS;

EID: 85084162640     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (20)

1. S. M. Bellovin. Distributed firewalls. ;login:, pages 39-47, November 1999.
2. BlackICE Defender. Network ICE, 2000. http://www.networkice.com/products/blackice-defender.html/.
3. Y. Bartal, A. Mayer, K. Nissim, and A. Wool. Firmato: A novel firewall management toolkit. In Proc. 20th IEEE Symp. on Security and Privacy, pages 17-31, Oakland, CA, May 1999.
4. Check Point FireWall-1, version 3.0. White paper, June 1997. http://www.checkpoint.com/products/whitepapers/wp30.pdf.
5. Cisco secure scanner 2.0, 2000. http://www.cisco.com/warp/public/cc/pd/sqsw/nesn/index.shtml.
6. Graphviz - open source graph drawing software. version 1.7, 2001. http://www.research.att.com/sw/tools/graphviz/.
7. Fyodor. NMAP - the network mapper, 2000. http://www.insecure.org/nmap/.
8. E. R. Gansner, E. Koutsofios, S. C. North, and K.-P. Vo. A technique for drawing directed graphs. IEEE Transactions on Software Engineering, 19(3):214-230, 1993.
9. D. Goldsmith and M. Schiffman. Fire-walking: A traceroute-like analysis of ip packet responses to determine gateway access control lists. White paper, Cambridge Technology Partners, 1998. http://www.packetfactory.net/firewalk/.
10. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith. Implementing a distributed firewall. In Proc. 7th ACM Conf. Computer and Communications Security (CCS), Athens, Greece, November 2000.
11. Cisco IOS firewall feature set, 2000. http://www.cisco.com/univercd/cc/td/doc/pcat/iofwfts1.htm.
12. Internet security systems: Internet scanner, 2000. http://documents.iss.net/literature/InternetScanner/is-ps.pdf.
13. Lucent managed firewall, version 3.0, 1999. http://www.lucent.com/iss/html/technical.html.
14. Lumeta firewall analyzer, 2001. http://www.lumeta.com/solution-firewall.html.
15. A. Mayer, A. Wool, and E. Ziskind. Fang: A firewall analysis engine. In Proc. IEEE Symp. on Security and Privacy, pages 177-187, Oakland, CA, May 2000.
16. Cisco's PIX firewall series and stateful firewall security. White paper, 1997. http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/tech/nat-wp.pdf.
17. A. Rubin, D. Geer, and M. Ranum. Web Security Sourcebook. Wiley Computer Publishing, 1997.
18. R. Russell. Linux IPCHAINS-HOWTO, v1.0.8, July 2000. http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO.html.
19. W. Xu, S. O'Neal, J. Schoonover, S. Moser, F. Lamar, and G. Grasboeck. fwrules50, 2000. Available from http://www.phoneboy.com/fw1/.
20. ZoneAlarm 2.1.44. Zone Labs, 2000. http://www.zonelabs.com/.