We found a match
Your institution may have access to this item. Find your institution then sign in to continue.
- Title
Detecting and Resolving Firewall Policy Anomalies.
- Authors
Hu, Hongxin; Ahn, Gail-Joon; Kulkarni, Ketan
- Abstract
The advent of emerging computing technologies such as service-oriented architecture and cloud computing has enabled us to perform business services more efficiently and effectively. However, we still suffer from unintended security leakages by unauthorized actions in business services. Firewalls are the most widely deployed security mechanism to ensure the security of private networks in most businesses and institutions. The effectiveness of security protection provided by a firewall mainly depends on the quality of policy configured in the firewall. Unfortunately, designing and managing firewall policies are often error prone due to the complex nature of firewall configurations as well as the lack of systematic analysis mechanisms and tools. In this paper, we represent an innovative policy anomaly management framework for firewalls, adopting a rule-based segmentation technique to identify policy anomalies and derive effective anomaly resolutions. In particular, we articulate a grid-based representation technique, providing an intuitive cognitive sense about policy anomaly. We also discuss a proof-of-concept implementation of a visualization-based firewall policy analysis tool called Firewall Anomaly Management Environment (FAME). In addition, we demonstrate how efficiently our approach can discover and resolve anomalies in firewall policies through rigorous experiments.
- Subjects
FIREWALLS (Computer security); ANOMALY detection (Computer security); ACCESS control; SECURITY measures of computer networks in business enterprises; DATA visualization
- Publication
IEEE Transactions on Dependable & Secure Computing, 2012, Vol 9, Issue 3, p318
- ISSN
1545-5971
- Publication type
Article
- DOI
10.1109/TDSC.2012.20