Policy segmentation for intelligent firewall testing
Policy segmentation for intelligent firewall testing
复制标题
智能防火墙测试的策略分段
DOI：
10.1109/npsec.2005.1532056
复制
发表时间：
2005
期刊：
影响因子：
--
通讯作者：
E. Al
中科院分区：
文献类型：
--
作者：
A. El;Khaled Ibrahim;H. Hamed;E. Al
Firewall development and implementation are constantly being improved to accommodate higher security and performance standards. Using reliable yet practical techniques for testing new packet filtering algorithms and firewall design implementations from a functionality point of view becomes necessary to assure the required security. In this paper, an efficient paradigm for automated testing of firewalls with respect to their internal implementation and security policies is proposed. We propose a novel firewall testing technique using policy-based segmentation of the traffic address space, which can intelligently adapt the test traffic generation to target potential erroneous regions in the firewall input space. We also show that our automated approach of test case generation, analyzing firewall logs and creating testing reports not only makes the problem solvable but also offers a significantly higher degree of confidence than random testing.
