loading
Papers Papers/2020

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Sergio Pozo ; Rafael Ceballos and Rafael M. Gasca

Affiliation: ETS Ingeniería Informática, University of Seville, Spain

Abstract: Firewall ACLs could have inconsistencies, allowing traffic that should be denied or vice-versa. In this paper, we analyze the inconsistency characterization problem as a separate problem of the diagnosis one, and propose definitions to characterize one-to-many inconsistencies. We identify the combinatorial part of the problem that causes exponential complexity in combined diagnosis and characterization algorithms proposed by other researchers. The problem is divided in several smaller combinatorial ones, which effectively reduces its complexity. Finally, we propose a heuristic to solve the problem in worst case polynomial time as a proof of concept.

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.236.212.116

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Pozo, S.; Ceballos, R. and M. Gasca, R. (2008). Firewall Rule Set Inconsistency Characterization by Clustering. In Proceedings of the 6th International Workshop on Security in Information Systems - WOSIS, (ICEIS 2008) ISBN 978-989-8111-44-9, pages 138-144. DOI: 10.5220/0001730701380144

@conference{wosis08,
author={Sergio Pozo. and Rafael Ceballos. and Rafael {M. Gasca}.},
title={Firewall Rule Set Inconsistency Characterization by Clustering},
booktitle={Proceedings of the 6th International Workshop on Security in Information Systems - WOSIS, (ICEIS 2008)},
year={2008},
pages={138-144},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0001730701380144},
isbn={978-989-8111-44-9},
}

TY - CONF

JO - Proceedings of the 6th International Workshop on Security in Information Systems - WOSIS, (ICEIS 2008)
TI - Firewall Rule Set Inconsistency Characterization by Clustering
SN - 978-989-8111-44-9
AU - Pozo, S.
AU - Ceballos, R.
AU - M. Gasca, R.
PY - 2008
SP - 138
EP - 144
DO - 10.5220/0001730701380144

0123movie.net