Misconfiguration Management of Network Security Components - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2005

Misconfiguration Management of Network Security Components

Résumé

Many companies and organizations use firewalls to control the access to their network infrastructure. Firewalls are network security components which provide means to filter traffic within corporate networks, as well as to police incoming and outcoming interaction with the Internet. For this purpose, it is necessary to configure firewalls with a set of filtering rules. Nevertheless, the existence of errors in a set of filtering rules is very likely to degrade the network security policy. The discovering and removal of these configuration errors is a serious and complex problem to solve. In this paper, we present a set of algorithms for such a management. Our approach is based on the analysis of relationships between the set of filtering rules. Then, a subsequent rewriting of rules will derive from an initial firewall setup -- potentially misconfigured -- to an equivalent one completely free of errors. At the same time, the algorithms will detect useless rules in the initial firewall configuration.

Dates et versions

hal-03628705 , version 1 (02-04-2022)

Identifiants

Citer

Frédéric Cuppens, Nora Cuppens-Boulahia, Joaquin Garcia‐alfaro. Misconfiguration Management of Network Security Components. 7th International Symposium on System and Information Security (SSI 2005), Nov 2005, Sao Paolo, Brazil. ⟨hal-03628705⟩
15 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More