White Papers

Formal Verification of Firewall Policies

Overview Firewalls are the mainstay of enterprise security and the most widely adopted technology for protecting private networks. The quality of protection provided by a firewall directly depends on the quality of its policy (i.e., configuration). Due to the lack of tools for verifying firewall policies, most firewalls on the Internet have been plagued with policy errors. A firewall policy error either creates security holes that will allow malicious traffic to sneak into a private network or blocks legitimate traffic and disrupts normal business processes, which in turn could lead to irreparable, if not tragic, consequences. This paper proposes a firewall verification tool in this paper. This tool takes as input a firewall policy and a given property, then outputs whether the policy satisfies the property.

Download White Paper

By downloading you agree to our Terms and Conditions. These include information regarding use of your personal data.

Publisher
Michigan State University
File Format
PDF
Date Published
Apr 16, 2008
Format
White Papers
Topics
Firewalls, Security Tools

Similiar White Papers

Balancing Security Against Productivity

Balancing Security Against Productivity

What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending atta

Publisher: Novell  |  Tags: management, security management

Security: New strides in preventing intrusions.

Security: New strides in preventing intrusions.

Need help eliminating risk in your IT environment? This ForwardView webshow describes how security appliances, which inc

Publisher: IBM

TechNet Webcast: ISA Server 2006 Firewall and Proxy Services (Level 200)

TechNet Webcast: ISA Server 2006 Firewall and Proxy Services (Level 200)

The presenter of this webcast describes how to use the firewall and proxy services in Microsoft Internet Security and Ac

Publisher: Microsoft  |  Tags: firewall

Interaction Between Nokia Intrusion Prevention and Nokia Firewall

Interaction Between Nokia Intrusion Prevention and Nokia Firewall

Firewalls provide protection between the external networks and internal networks by blocking potentially malicious traff

Publisher: Nokia  |  Tags: deep packet inspection, email, ftp, infrastructure, network, network infrastructure, sip, smtp, voip

Novell Zenworks Endpoint Security Management: Total Control from a Single Console

Novell Zenworks Endpoint Security Management: Total Control from a Single Console

Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardwar

Publisher: Novell  |  Tags: usb

Michigan State University White Papers

An Autonomous Robotic Fish for Mobile Sensing

An Autonomous Robotic Fish for Mobile Sensing

In this paper an innovative approach to robotics education is reported, where hands-on learning is integrated with cutti

Publisher: Michigan State University  |  Tags: gps, robotics, zigbee

Can Soft Biometric Traits Assist User Recognition?

Can Soft Biometric Traits Assist User Recognition?

Biometrics is rapidly gaining acceptance as the technology that can meet the ever increasing need for security in critic

Publisher: Michigan State University  |  Tags: applications, biometric

Hiding Fingerprint Minutiae in Images

Hiding Fingerprint Minutiae in Images

This paper introduces an application of steganography and watermarking to enable secure biometric data (e.g., fingerprin

Publisher: Michigan State University  |  Tags: biometric, data, fingerprints

Best Practices in Disposal of Computers and Electronic Storage Media

Best Practices in Disposal of Computers and Electronic Storage Media

At some point in the life cycle of a computer its owner will decide to dispose of the equipment. When this occurs, it is

Publisher: Michigan State University  |  Tags: computers

Biometrics: A Grand Challenge

Biometrics: A Grand Challenge

AFIS systems have been providing terrific value to the society by using a good integration of automatic and manual proce

Publisher: Michigan State University  |  Tags: biometric, biometrics