The Second International Conference on Availability, Reliability and Security (ARES'07) CSP-Based Firewall Rule Set Diagnosis using Security Policies Vienna, Austria April 10-April 13 ISBN: 0-7695-2775-2
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ARES.2007.63
The most important part of a firewall configuration process is the implementation of a security policy by a security administrator. However, this security policy is not designed by higher levels of the organisation, nor is written anywhere, so it is very usual to make mistakes in its implementation. To solve this problem we propose to express this global access control policy in some informal language that is translated to a model specification in conjunction with the firewall rule set. Then we construct a Constraint Satisfaction Problem to detect and identify the possible inconsistencies between the specified policy and the firewall rule set.
Citation:
S. Pozo, R. Ceballos, R. M. Gasca, "CSP-Based Firewall Rule Set Diagnosis using Security Policies," ares, pp.723-729, The Second International Conference on Availability, Reliability and Security (ARES'07), 2007 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb