Policy Anomaly Detection for Distributed IPv6 Firewalls

Claas Lorenz; Bettina Schnor

Research.Publish.Connect.

*Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Country:
Subject:

Advanced Search Affiliations Search

If you're looking for an exact phrase use quotation marks on text fields.

Proceedings

Proceedings Search *Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

Papers

Papers Search *Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

Authors

Authors Search *Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

Advanced Search

Paper

Policy Anomaly Detection for Distributed IPv6 Firewalls

Topics: Formal Methods for Security; Network Security; Security in Distributed Systems; Security Verification and Validation

In Proceedings of the 12th International Conference on Security and Cryptography - Volume 0ICETE, 210-219, 2015 , Colmar, Alsace, France

Authors: Claas Lorenz ¹ and Bettina Schnor ²

Affiliations: ¹ genua mbh and Potsdam University, Germany ; ² Potsdam University, Germany

Keyword(s): Security, Firewalls, IPv6, Model-Checking.

Related Ontology Subjects/Areas/Topics: Formal Methods for Security ; Information and Systems Security ; Network Security ; Security in Distributed Systems ; Security Verification and Validation ; Wireless Network Security

Abstract: Concerning the design of a security architecture, Firewalls play a central role to secure computer networks. Facing the migration of IPv4 to IPv6, the setup of capable firewalls and network infrastructures will be necessary. The semantic differences between IPv4 and IPv6 make misconfigurations possible that may cause a lower performance or even security problems. For example, a cycle in a firewall configuration allows an attacker to craft network packets that may result in a Denial of Service. This paper investigates model checking techniques for automated policy anomaly detection. It shows that with a few adoptions existing approaches can be extended to support the IPv6 protocol with its specialities like the tremendously larger address space or extension headers. The performance is evaluated empirically by measurements with our prototype implementation ad6.

CC BY-NC-ND 4.0

Guest: Register as new SciTePress user now for free.

SciTePress user: please login.

My Papers

You are not signed in, therefore limits apply to your IP address 18.218.38.125

In the current month:

Recent papers: 100 available of 100 total

2⁺ years older papers: 200 available of 200 total

Paper citation in several formats:

Lorenz, C. and Schnor, B. (2015). Policy Anomaly Detection for Distributed IPv6 Firewalls. In Proceedings of the 12th International Conference on Security and Cryptography (ICETE 2015) - SECRYPT; ISBN 978-989-758-117-5; ISSN 2184-3236, SciTePress, pages 210-219. DOI: 10.5220/0005517402100219

@conference{secrypt15,
author={Claas Lorenz. and Bettina Schnor.},
title={Policy Anomaly Detection for Distributed IPv6 Firewalls},
booktitle={Proceedings of the 12th International Conference on Security and Cryptography (ICETE 2015) - SECRYPT},
year={2015},
pages={210-219},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005517402100219},
isbn={978-989-758-117-5},
issn={2184-3236},
}

TY - CONF

JO - Proceedings of the 12th International Conference on Security and Cryptography (ICETE 2015) - SECRYPT
TI - Policy Anomaly Detection for Distributed IPv6 Firewalls
SN - 978-989-758-117-5
IS - 2184-3236
AU - Lorenz, C.
AU - Schnor, B.
PY - 2015
SP - 210
EP - 219
DO - 10.5220/0005517402100219
PB - SciTePress