Detection and Removal of Firewall Misconfiguration - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2005

Detection and Removal of Firewall Misconfiguration

Résumé

To police network traffic, firewalls must be configured with a set of filtering rules. The existence of errors in this set is very likely to degrade the network security policy. The management of these configuration errors is a serious and complex problem to solve. In this paper, we present a set of algorithms to manage rules that never apply or are redundant in a firewall configuration. Our approach is based on the analysis of relationships between the set of filtering rules. Then, a subsequent rewriting of rules will derive from an initial firewall setup to an equivalent one completely free of errors. At the same time, the algorithms will detect both shadowed and redundant rules in the initial firewall configuration.
Fichier principal
Vignette du fichier
cnis05.pdf (104.42 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03628708 , version 1 (02-04-2022)

Identifiants

  • HAL Id : hal-03628708 , version 1

Citer

Frederic Cuppens, Nora Boulahia Cuppens, Joaquin Garcia‐alfaro. Detection and Removal of Firewall Misconfiguration. 2005 IASTED International Conference on Communication, Network and Information Security (CNIS 2005 ), Nov 2005, Phoenix, United States. ⟨hal-03628708⟩
68 Consultations
77 Téléchargements

Partager

Gmail Facebook X LinkedIn More