Firewalls White Papers
FIREMAN: A Toolkit for FIREwall Modeling and ANalysis
Overview Security concerns are becoming increasingly critical in networked systems. Firewalls provide important defense for network security. However, misconfigurations in firewalls are very common and significantly weaken the desired security. This paper introduces FIREMAN, a static analysis toolkit for firewall modeling and analysis. By treating firewall configurations as specialized programs, FIREMAN applies static analysis techniques to check misconfigurations, such as policy violations, inconsistencies, and inefficiencies, in individual firewalls as well as among distributed firewalls. FIREMAN performs symbolic model checking of the firewall configurations for all possible IP packets and along all possible data paths. It is both sound and complete because of the finite state nature of firewall configurations.
| Publisher | University of California | File Format | |
|---|---|---|---|
| Date Published | March 2006 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 2 out of 6 users found this white paper useful
White Paper RSS
Download
Register
