Design and Implementation for the Firewall Policy Analysis and Configuration Tools

Jian Shi; Song Deng; Wei Min  Lin; Tao Zhang; Yuan Yuan Ma; Wei Wei Li

doi:10.4028/www.scientific.net/AMM.433-435.1597

Paper Titles

The Research on Static Characteristics of 1700V/100A Planner NPT-IGBT
p.1572

A Service Publishing and Service Location Algorithm for Internet of Things
p.1581

Using Pop-Up Form in Web Applications
p.1588

An Algorithm of LDA Topic Reduction Based on Rough Set
p.1593

Design and Implementation for the Firewall Policy Analysis and Configuration Tools
p.1597

The Implementation of Rights Management of Network Teaching Platform with Role-Based Access Control
p.1603

Research on Design of IETM General Developing Platform Based on GB/T24463
p.1609

A Data Delivery Controller for Mobile Communication Based on Multiple Threads Mechanism
p.1613

Distributed Customer Service Management for Internet of Things
p.1618

HomeApplied Mechanics and MaterialsApplied Mechanics and Materials Vols. 433-435Design and Implementation for the Firewall Policy...

Design and Implementation for the Firewall Policy Analysis and Configuration Tools

Abstract:

The firewall is one of the most important network security facility and is widely used as a base infrastructure in a large enterprise network. When policy changes, the administrator must find all the potential conflicts between existing policies to ensure network security. That's a waste of time and energy. Proceeding from the demands, this paper analyzes key points and difficulties in the design process for the tools, applies mature algorithm of policy conflict detection, and finally proposes a flexible and scalable design. The prototype system proves that the tool does effectively detect all conflicts in policy set, and in the form of reports for the administrator.

You might also be interested in these eBooks

Advances in Mechatronics and Control Engineering II

View Preview

Info:

Periodical:

Applied Mechanics and Materials (Volumes 433-435)

Pages:

1597-1602

DOI:

https://doi.org/10.4028/www.scientific.net/AMM.433-435.1597

Citation:

Cite this paper

Online since:

October 2013

Authors:

Jian Shi, Song Deng, Wei Min Lin, Tao Zhang, Yuan Yuan Ma, Wei Wei Li

Keywords:

Firewall Policy, Network Security, Policy Analysis, Policy Conflict

Export:

RIS, BibTeX

Price:

Permissions CCC:

Request Permissions

Permissions PLS:

Request Permissions

Сopyright:

Citation:

References

[1] Liu Jun-jun, Liang Jian-wu. 2008. Adescription method for firewall policy based on decision tree, Microcomputer information, pp.223-224.

Google Scholar

[2] Liang Jian-wu, Long Xiao-mei, Liu Jun-jun. 2010. Detection algorithm for firewall policy based on LE-Trie, Computer Engineering, pp.134-136.

Google Scholar

[3] Laskshman T V, Stidialis D. 1998. High speed policy based packet forwarding using efficient multi dimensional range matching" Proceddings of ACM sigcomm, 98. Canada: Computer communication Review, 1998: 203-214.

DOI: 10.1145/285243.285283

Google Scholar

[4] Gupta P, McKeown N. 2001. Algorithms for packet classification errors, IEEE Network, 2001, 15(2): 24-43.

DOI: 10.1109/65.912717

Google Scholar

[5] GOUDA M, LIU X. 2004. Firewall design: Consistency, Completeness, and Compactness, Proceedings of the 24th IEEE International Conference on Distributed Computing Systems(ICDCS 04), 2004, 3.

DOI: 10.1109/icdcs.2004.1281597

Google Scholar

[6] Wool A. 2004. A quantitative study of firewall configuration errors, IEEE Computer society 2004, 37(6): 62-67.

DOI: 10.1109/mc.2004.2

Google Scholar

[7] Zhang Zhao-li, Hong Fan, Xiao Hai-jun. 2007. A detection method for policy conflict, Computer engineering and applications. pp.111-113.

Google Scholar