Firewalls White Papers
Specifications of a High-Level Conflict-Free Firewall Policy Language for Multi-Domain Networks
Overview Multiple firewalls typically cooperate to provide security properties for a network, despite the fact that these firewalls are often spatially distributed and configured in isolation. Without a global view of the network configuration, such a system is ripe for misconfiguration, causing conflicts and major security vulnerabilities. This proposes FLIP, a high-level firewall configuration policy language for traffic access control, to enforce security and ensure seamless configuration management. In FLIP, firewall security policies are defined as high-level service-oriented goals, which can be translated automatically into access control rules to be distributed to appropriate enforcement devices. FLIP guarantees that the rules generated will be conflict-free, both on individual firewall and between firewalls.
| Publisher | Association for Computing Machinery | File Format | |
|---|---|---|---|
| Date Published | June 2007 | ||
| Format | White Papers | ||
| Topics | |||



