Safe and Efficient Strategies for Updating Firewall Policies - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2010

Safe and Efficient Strategies for Updating Firewall Policies

Abstract

Due to the large size and complex structure of modern networks, firewall policies can contain several thousand rules. The size and complexity of these policies require automated tools providing a user-friendly environment to specify, configure and safely deploy a target policy. When activated in online mode, a firewall policy deployment is a very difficult and error-prone task. Indeed, it may result in self-Denial of Service (self-DoS) and/or temporary security breaches. In this paper, we provide correct, efficient and safe algorithms for two important classes of policy editing. Our experimental results show that these algorithms are fast and can be used safely even for deploying large policies.
No file

Dates and versions

inria-00529077 , version 1 (24-10-2010)

Identifiers

  • HAL Id : inria-00529077 , version 1

Cite

Zeeshan Ahmed, Abdessamad Imine, Michael Rusinowitch. Safe and Efficient Strategies for Updating Firewall Policies. 7th International Conference on Trust, Privacy & Security in Digital Business - TrustBus 2010, Aug 2010, Bilbao, Spain. pp.45-57. ⟨inria-00529077⟩
181 View
0 Download

Share

Gmail Facebook X LinkedIn More