Automatic Verification of Conformance of Firewall Configurations to Security Policies - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2009

Automatic Verification of Conformance of Firewall Configurations to Security Policies

Abstract

The configuration of firewalls is highly error prone and automated solution are needed in order to analyze its correctness. We propose a formal and automatic method for checking whether a firewall reacts correctly wrt a security policy given in an high level declarative language. When errors are detected, some feedback is returned to the user in order to correct the firewall configuration. Furthermore, the procedure verifies that no conflicts exist within the security policy. We show that our method is both correct and complete. Finally, it has been implemented in a prototype of verifier based on a satisfiability solver modulo theories (SMT). Experiment conducted on relevant case studies demonstrate the efficiency and scalability of the approach.
Fichier principal
Vignette du fichier
paper8.pdf (307.21 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00578926 , version 1 (22-03-2011)

Identifiers

Cite

Nihel Ben Youssef, Adel Bouhoula, Florent Jacquemard. Automatic Verification of Conformance of Firewall Configurations to Security Policies. IEEE Symposium on Computers and Communications (ISCC), Jul 2009, Sousse, Tunisia. pp.526-531, ⟨10.1109/ISCC.2009.5202309⟩. ⟨inria-00578926⟩
143 View
557 Download

Altmetric

Share

Gmail Facebook X LinkedIn More