Spécification Method for Analyzing Fine Grained Network Security Mechanism Configurations - Archive ouverte HAL
Communication Dans Un Congrès Année : 2013

Spécification Method for Analyzing Fine Grained Network Security Mechanism Configurations

Résumé

Quick evolution, heterogeneity, interdependence between equipment, and many other factors induce high complexity to network security analysis. Although several approaches have proposed different analysis tools, achieving this task requires experienced and proficient security administrators who can handle all these parameters. The challenge is not to propose a temporary solution but to offer a building block for this large domain, though no approach can be optimal for all tasks. In previous papers, we have proposed a novel formal model of equipment configuration built on data flow attribute-based approach to detect network security conflicts. In this paper, we extend the previous proposed model in order to make it more generic by proving it can handle microscopic analysis. We define a formal analysis method for network security mechanisms. Therefore, we specify our approach in Colored Petri Networks to automate the conflicts analysis and test it on a fine-grained firewall scenario.
Fichier principal
Vignette du fichier
El_Khoury_12724.pdf (248.79 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04083309 , version 1 (27-04-2023)

Identifiants

Citer

Hicham El Khoury, Romain Laborde, François Barrère, Abdelmalek Benzekri, Chamoun Maroun. Spécification Method for Analyzing Fine Grained Network Security Mechanism Configurations. 6th Symposium on Security Analytics and Automation 2013 (SafeConfig 2013), Oct 2013, Washington, D.C., United States. pp.483-487, ⟨10.1109/CNS.2013.6682764⟩. ⟨hal-04083309⟩
40 Consultations
26 Téléchargements

Altmetric

Partager

More