<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-00737170</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-24T22:28:28+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Handling Stateful Firewall Anomalies</title>
            <author role="aut">
              <persName>
                <forename type="first">Frédéric</forename>
                <surname>Cuppens</surname>
              </persName>
              <email type="md5">cbfcb9e0c1bec1c973af82fb27da613e</email>
              <email type="domain">telecom-bretagne.eu</email>
              <idno type="idhal" notation="numeric">863922</idno>
              <idno type="halauthorid" notation="string">420462-863922</idno>
              <affiliation ref="#struct-60070"/>
              <affiliation ref="#struct-402245"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Nora</forename>
                <surname>Cuppens-Boulahia</surname>
              </persName>
              <email type="md5">b604c661dd080ed359191e81b4685bfa</email>
              <email type="domain">telecom-bretagne.eu</email>
              <idno type="idhal" notation="numeric">863921</idno>
              <idno type="halauthorid" notation="string">420699-863921</idno>
              <affiliation ref="#struct-60070"/>
              <affiliation ref="#struct-402245"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Joaquin</forename>
                <surname>Garcia Alfaro</surname>
              </persName>
              <email type="md5">b490bb6ca4d305ede751e1e4eb9e7573</email>
              <email type="domain">telecom-sudparis.eu</email>
              <idno type="idhal" notation="string">jgalfaro</idno>
              <idno type="idhal" notation="numeric">743397</idno>
              <idno type="halauthorid" notation="string">436358-743397</idno>
              <idno type="RESEARCHERID">http://www.researcherid.com/rid/A-4500-2008</idno>
              <idno type="GOOGLE SCHOLAR">2XOGqtsAAAAJ</idno>
              <idno type="IDREF">https://www.idref.fr/113064004</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-7453-4393</idno>
              <idno type="RESEARCHERID">http://www.researcherid.com/rid/http://www.researcherid.com/rid/A-4500-2008</idno>
              <affiliation ref="#struct-60070"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Tarik</forename>
                <surname>Moataz</surname>
              </persName>
              <idno type="idhal" notation="numeric">766990</idno>
              <idno type="halauthorid" notation="string">663147-766990</idno>
              <idno type="IDREF">https://www.idref.fr/204466385</idno>
              <affiliation ref="#struct-60070"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Xavier</forename>
                <surname>Rimasson</surname>
              </persName>
              <idno type="halauthorid">663148-0</idno>
              <affiliation ref="#struct-60070"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Ex-Bibliothèque</forename>
                <surname>Télécom Bretagne (devenu IMT Atlantique)</surname>
              </persName>
              <email type="md5">1db35bce4a31c4f6d23fbf67e680f0f9</email>
              <email type="domain">imt-atlantique.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2012-10-01 13:44:58</date>
              <date type="whenModified">2026-01-23 09:12:06</date>
              <date type="whenReleased">2012-10-01 14:54:43</date>
              <date type="whenProduced">2012-06-04</date>
              <date type="whenEndEmbargoed">2012-10-01</date>
              <ref type="file" target="https://hal.science/hal-00737170v1/document">
                <date notBefore="2012-10-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-00737170v1/file/sec12-preprint.pdf" id="file-737170-1099998">
                <date notBefore="2012-10-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-30436-1_15.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="142672">
                <persName>
                  <forename>Ex-Bibliothèque</forename>
                  <surname>Télécom Bretagne (devenu IMT Atlantique)</surname>
                </persName>
                <email type="md5">1db35bce4a31c4f6d23fbf67e680f0f9</email>
                <email type="domain">imt-atlantique.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-00737170</idno>
            <idno type="halUri">https://hal.science/hal-00737170</idno>
            <idno type="halBibtex">cuppens:hal-00737170</idno>
            <idno type="halRefHtml">&lt;i&gt;27th Information Security and Privacy Conference (SEC)&lt;/i&gt;, Jun 2012, Heraklion, Greece. pp.174-186, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-30436-1_15"&gt;&amp;#x27E8;10.1007/978-3-642-30436-1_15&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Greece. pp.174-186, &amp;#x27E8;10.1007/978-3-642-30436-1_15&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-737170-1099998"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-BREST">Université de Bretagne occidentale - Brest (UBO)</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="UNIV-UBS">Université de Bretagne Sud</idno>
            <idno type="stamp" n="TELECOM-BRETAGNE">Télécom Bretagne</idno>
            <idno type="stamp" n="ENIB">Ecole Nationale d'Ingénieurs de Brest</idno>
            <idno type="stamp" n="LAB-STICC_ENIB" corresp="ENIB">Laboratoire des Sciences et Techniques de l'Information, de la Communication et de la Connaissance, site ENIB Brest</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="LAB-STICC">Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="LAB-STICC_TB" corresp="TELECOM-BRETAGNE">Publications Télécom Bretagne du Lab-STICC</idno>
            <idno type="stamp" n="IFIP-AICT-376" corresp="IFIP-AICT">Information Security and Privacy Research</idno>
            <idno type="stamp" n="IMTA_LUSSI">IMT Atlantique - Département logique des usages, sciences sociales et de l'Information</idno>
            <idno type="stamp" n="LAB-STICC_IMTA">Lab-STICC - IMT Atlantique</idno>
            <idno type="stamp" n="IMT-ATLANTIQUE" corresp="INSTITUT-MINES-TELECOM">IMT-ATLANTIQUE</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="IMTA_DSD">IMT Atlantique - Département de Science des Données</idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 4: Access Control</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Handling Stateful Firewall Anomalies</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Frédéric</forename>
                    <surname>Cuppens</surname>
                  </persName>
                  <email type="md5">cbfcb9e0c1bec1c973af82fb27da613e</email>
                  <email type="domain">telecom-bretagne.eu</email>
                  <idno type="idhal" notation="numeric">863922</idno>
                  <idno type="halauthorid" notation="string">420462-863922</idno>
                  <affiliation ref="#struct-60070"/>
                  <affiliation ref="#struct-402245"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Nora</forename>
                    <surname>Cuppens-Boulahia</surname>
                  </persName>
                  <email type="md5">b604c661dd080ed359191e81b4685bfa</email>
                  <email type="domain">telecom-bretagne.eu</email>
                  <idno type="idhal" notation="numeric">863921</idno>
                  <idno type="halauthorid" notation="string">420699-863921</idno>
                  <affiliation ref="#struct-60070"/>
                  <affiliation ref="#struct-402245"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Joaquin</forename>
                    <surname>Garcia Alfaro</surname>
                  </persName>
                  <email type="md5">b490bb6ca4d305ede751e1e4eb9e7573</email>
                  <email type="domain">telecom-sudparis.eu</email>
                  <idno type="idhal" notation="string">jgalfaro</idno>
                  <idno type="idhal" notation="numeric">743397</idno>
                  <idno type="halauthorid" notation="string">436358-743397</idno>
                  <idno type="RESEARCHERID">http://www.researcherid.com/rid/A-4500-2008</idno>
                  <idno type="GOOGLE SCHOLAR">2XOGqtsAAAAJ</idno>
                  <idno type="IDREF">https://www.idref.fr/113064004</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-7453-4393</idno>
                  <idno type="RESEARCHERID">http://www.researcherid.com/rid/http://www.researcherid.com/rid/A-4500-2008</idno>
                  <affiliation ref="#struct-60070"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Tarik</forename>
                    <surname>Moataz</surname>
                  </persName>
                  <idno type="idhal" notation="numeric">766990</idno>
                  <idno type="halauthorid" notation="string">663147-766990</idno>
                  <idno type="IDREF">https://www.idref.fr/204466385</idno>
                  <affiliation ref="#struct-60070"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Xavier</forename>
                    <surname>Rimasson</surname>
                  </persName>
                  <idno type="halauthorid">663148-0</idno>
                  <affiliation ref="#struct-60070"/>
                </author>
              </analytic>
              <monogr>
                <idno type="localRef">12353</idno>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>27th Information Security and Privacy Conference (SEC)</title>
                  <date type="start">2012-06-04</date>
                  <date type="end">2012-06-06</date>
                  <settlement>Heraklion</settlement>
                  <country key="GR">Greece</country>
                </meeting>
                <editor>Dimitris Gritzalis</editor>
                <editor>Steven Furnell</editor>
                <editor>Marianthi Theoharidou</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security and Privacy Research</biblScope>
                  <biblScope unit="volume">AICT-376</biblScope>
                  <biblScope unit="pp">174-186</biblScope>
                  <date type="datePub">2012</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-30436-1_15</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Network Access Control</term>
                <term xml:lang="en">Misconfiguration</term>
                <term xml:lang="en">Firewalls</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>A security policy consists of a set of rules designed to protect an information system. To ensure this protection, the rules must be deployed on security components in a consistent and non-redundant manner. Unfortunately, an empirical approach is often adopted by network administrators, to the detriment of theoretical validation. While the literature on the analysis of configurations of first generation (stateless) firewalls is now rich, this is not the case for second and third generation firewalls, also known as stateful firewalls. In this paper, we address this limitation, and provide solutions to analyze and handle stateful firewall anomalies and misconfiguration.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="department" xml:id="struct-60070" status="OLD">
          <orgName>Département Logique des Usages, Sciences sociales et Sciences de l'Information</orgName>
          <orgName type="acronym">LUSSI</orgName>
          <desc>
            <address>
              <addrLine>Technopôle Brest Iroise - CS 83818 - 29238 BREST Cedex 3</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-108091" type="direct"/>
            <relation active="#struct-301262" type="direct"/>
            <relation active="#struct-302102" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-402245" status="OLD">
          <orgName>Lab-STICC_TB_CID_SFIIS</orgName>
          <date type="end">2016-12-31</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-199324" type="direct"/>
            <relation active="#struct-108091" type="indirect"/>
            <relation active="#struct-131284" type="indirect"/>
            <relation active="#struct-300314" type="indirect"/>
            <relation active="#struct-1705235" type="indirect"/>
            <relation active="#struct-172265" type="indirect"/>
            <relation active="#struct-301262" type="indirect"/>
            <relation active="#struct-301521" type="indirect"/>
            <relation active="#struct-301846" type="indirect"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="UMR6285" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-108091" status="OLD">
          <idno type="ROR">https://ror.org/033c46s90</idno>
          <orgName>Université européenne de Bretagne - European University of Brittany</orgName>
          <orgName type="acronym">UEB</orgName>
          <desc>
            <address>
              <addrLine>5 boulevard Laënnec - 35000 Rennes</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ueb.eu/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-301262" status="OLD">
          <orgName>Télécom Bretagne</orgName>
          <date type="start">1977</date>
          <desc>
            <address>
              <addrLine>Technopôle Brest-IroiseCS 8381829238 BREST Cedex 3</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.telecom-bretagne.eu/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-199324" status="OLD">
          <orgName>Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance</orgName>
          <orgName type="acronym">Lab-STICC</orgName>
          <desc>
            <address>
              <addrLine>Technopole Brest Iroise BP 832 29285 BREST CEDEX</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.lab-sticc.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-108091" type="direct"/>
            <relation active="#struct-131284" type="direct"/>
            <relation active="#struct-300314" type="direct"/>
            <relation active="#struct-1705235" type="indirect"/>
            <relation active="#struct-172265" type="direct"/>
            <relation active="#struct-301262" type="direct"/>
            <relation active="#struct-301521" type="direct"/>
            <relation active="#struct-301846" type="direct"/>
            <relation active="#struct-302102" type="direct"/>
            <relation name="UMR6285" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-131284" status="VALID">
          <idno type="ROR">https://ror.org/02ypw0a72</idno>
          <orgName>École Nationale d'Ingénieurs de Brest</orgName>
          <orgName type="acronym">ENIB</orgName>
          <desc>
            <address>
              <addrLine>945 avenue du Technopole - 29280 Plouzané</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.enib.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300314" type="direct"/>
            <relation active="#struct-1705235" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-300314" status="VALID">
          <idno type="IdRef">291809022</idno>
          <idno type="ISNI">0000000121880893</idno>
          <idno type="ROR">https://ror.org/0372th171</idno>
          <orgName>Université de Brest</orgName>
          <orgName type="acronym">UBO EPE</orgName>
          <desc>
            <address>
              <addrLine>Université de Bretagne Occidentale - 3 Rue des Archives 29238, Brest</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-brest.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-1705235" status="VALID">
          <idno type="IdRef">291816037</idno>
          <orgName>Institut National Polytechnique de Bretagne</orgName>
          <orgName type="acronym">Bretagne INP</orgName>
          <date type="start">2025-03-01</date>
          <desc>
            <address>
              <addrLine>945 avenue du Technopôle Brest-Iroise, 29289 Plouzané</addrLine>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-172265" status="VALID">
          <idno type="IdRef">05017746X</idno>
          <idno type="ISNI">0000000121680285</idno>
          <idno type="ROR">https://ror.org/04ed7fw48</idno>
          <orgName>Université de Bretagne Sud</orgName>
          <orgName type="acronym">UBS</orgName>
          <date type="start">1995-02-07</date>
          <desc>
            <address>
              <addrLine>BP 92116 - 56321 Lorient cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-ubs.fr/</ref>
          </desc>
        </org>
        <org type="regrouplaboratory" xml:id="struct-301521" status="VALID">
          <orgName>Institut Brestois du Numérique et des Mathématiques</orgName>
          <orgName type="acronym">IBNM</orgName>
          <desc>
            <address>
              <addrLine>Université de Brest - UBO3 Rue des Archives, 29238 Brest</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-brest.fr/menu/recherche-innovation/Laboratoires/Axe+Num%C3%A9rique-Math%C3%A9matiques/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300314" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-301846" status="OLD">
          <idno type="IdRef">177263660</idno>
          <idno type="ROR">https://ror.org/059n54003</idno>
          <orgName>École Nationale Supérieure de Techniques Avancées Bretagne</orgName>
          <orgName type="acronym">ENSTA Bretagne</orgName>
          <date type="end">2024-12-31</date>
          <desc>
            <address>
              <addrLine>2 rue François Verny, 29806 Brest cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ensta-bretagne.fr</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>