Towards filtering and alerting rule rewriting on single-component policies - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2006

Towards filtering and alerting rule rewriting on single-component policies

Résumé

The use of firewalls and network intrusion detection systems (NIDSs)is the dominant method to survey and guarantee the security policy in current corporate networks. On the one hand, firewalls are traditional security components which provide means to filter traffic within corporate networks, as well as to police the incoming and outcoming interaction with the Internet. On the other hand, NIDSs are complementary security components used to enhance the visibility level of the network, pointing to configure both firewalls and NIDSs, it is necessary the use of a set of configuration rules, i.e., a set of filtering or alerting rules. Nevertheless, the existence of anomalies within the set of configuration rules of both firewalls and NIDSs is very likely to degrade the network security policy. The discovering and removal of these anomalies is a serious and complex problem to solve. In this paper, we present a set of mechanisms for such a management.
Fichier principal
Vignette du fichier
safecomp06.pdf (249.01 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00540448 , version 1 (26-11-2010)

Identifiants

  • HAL Id : hal-00540448 , version 1

Citer

Joaquin Garcia Alfaro, Frédéric Cuppens, Nora Cuppens-Boulahia. Towards filtering and alerting rule rewriting on single-component policies. Proceedings of the 25th International Conference, SAFECOMP 2006, Jun 2006, Gdansk, Poland. pp.182-194. ⟨hal-00540448⟩
65 Consultations
117 Téléchargements

Partager

Gmail Facebook X LinkedIn More