Firewalls White Papers
Discovery of Policy Anomalies in Distributed Firewalls
Overview Firewalls are core elements in network security. However, managing firewall rules, particularly in multi-firewall enterprise networks, has become a complex and error-prone task. Firewall filtering rules have to be written, ordered and distributed carefully in order to avoid firewall policy anomalies that might cause network vulnerability. Therefore, inserting or modifying filtering rules in any firewall requires thorough intra- and inter-firewall analysis to determine the proper rule placement and ordering in the firewalls. This paper identifies all anomalies that could exist in a single- or multi-firewall environment. It also presents a set of techniques and algorithms to automatically discover policy anomalies in centralized and distributed legacy firewalls.
| Publisher | DePaul University | File Format | |
|---|---|---|---|
| Date Published | December 2003 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 3 out of 8 users found this white paper useful
White Paper RSS
Download
Register
