Firewall analysis with policy-based host classification

LISA 2006 - 20th Large Installation System Administration Conference

Volumn , Issue , 2006, Pages 41-51

  Marmorstein, Robert ^a   Kearns, Phil ^a  

^a Dept of Economics and Thomas Jefferson Program in Public Policy at the College of William and Mary   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLEX NETWORKS; EQUIVALENCE CLASSES; ERRORS; PROGRAM DEBUGGING;

AUTOMATIC TECHNIQUE; FIREWALL POLICIES; LARGE SYSTEM; MANUAL INSPECTION; NETWORK HOSTS; POTENTIAL ERRORS; TESTING AND DEBUGGING; VERIFICATION TECHNIQUES;

COMPUTER SYSTEM FIREWALLS;

EID: 85094318018     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. Al-Shaer, Ehab S. and Hazem H. Hamed, "Modeling and management of firewall policies," Transactions on Network and Service Management, April, 2004
2. Barisani, Andrea, "Testing firewalls and IDS with ftester," In Insight, Newsletter of the Internet Security Conference, Vol. 5, 2001, http:// www.tisc2001.com/newsletters/56.html
3. Bogaerts, Philippe, HPING tutorial, August, 2003, http://www.radarhack.com/dir/papers/hping2-v1.5.pdf
4. Eronen, Pasi and Jukka Zitting, "An expert system for analyzing firewall rules," Proceedings of the 6th Nordic Workshop on Secure IT Systems, 2001
5. Eychenne, Herve, iptables man page, March, 2002
6. Farmer, Dan and Wietse Venema, SATAN: Security Administrator?s Tool for Analyzing Networks, 1995, http://www.fish.com/zen/satan/
7. Fyodor, "The art of port scanning," Phrack, Vol. 7, Num. 51, September, 1997
8. Gouda, Mohamed G. and Alex X. Liu, "Firewall design: Consistency, completeness, and compactness," Proceedings of the International Conference on Distributed Computing Systems, IEEE Computer Society, March, 2004
9. Internet Security Systems, Internet Scanner User Guide Version 7.0 SP 2, 2005, http://documents. iss.net/literature/InternetScanner/IS-UG-7.0-SP2. pdf
10. Lampe, John, Nessus 3.0 Advanced User Guide, October, 2005, http://www.nessus.org
11. Liu, Alex X., Mohamed G. Gouda, Huibo Heidi Ma, and Anne H. Ngu, "Firewall queries," Proceedings of the 8th International Conference on Principles of Distributed Systems (OPODIS-04), LNCS 3544, Springer-Verlag, December, 2004, http://www.cs.utexas.edu/users/alex/publications/ FirewallQueries/query.pdf
12. Marmorstein, Robert, ITVal Project Website, 2005, http://itval.sourceforge.net
13. Marmorstein, Robert and Phil Kearns, "An open source solution for testing NAT?d and nested iptables firewalls," 19th Large Installation Systems Administration Conference (LISA ?05), pp. 103-112, December, 2005
14. Marmorstein, Robert and Phil Kearns, "A tool for automated iptables firewall analysis," FREENIX Track, 2005 USENIX Annual Technical Conference, pp. 71-82, April, 2005
15. Mayer, Alain, Avishai Wool, and Elisha Ziskind, "Fang: A firewall analysis engine," Proceedings of the IEEE Symposium on Security and Privacy, May, 2000
16. Quinton, Reg, Using Solaris ipfilters, http://ist. waterloo.ca/security/howto/2005-08-19/paper.pdf
17. Singer, Abe, "Life without firewalls," ;login:, Vol. 28, Num. 6, pp. 27-30, December, 2003
18. Wool, Avishai, "Architecting the Lumeta firewall analyzer," Proceedings of the 10th USENIX Security Symposium, August, 2001