Automated repair by example for firewalls
Automated repair by example for firewalls
复制标题
防火墙自动修复示例
DOI：
10.1007/s10703-020-00346-0
复制
发表时间：
2020
影响因子：
0.8
通讯作者：
Piskac, Ruzica
中科院分区：
文献类型：
--
作者：
Hallahan, William T.;Zhai, Ennan;Piskac, Ruzica
Firewalls are widely deployed to manage enterprise networks. Because enterprise-scale firewalls contain hundreds or thousands of rules, ensuring the correctness of firewalls - that the rules in the firewalls meet the specifications of their administrators - is an important but challenging problem. Although existing firewall diagnosis and verification techniques can identify potentially faulty rules, they offer administrators little or no help with automatically fixing faulty rules. This paper presents FireMason, the first effort that offers automated repair by example for firewalls. Once an administrator observes undesired behavior in a firewall, she may provide input/output examples that comply with the intended behaviors. Based on the examples, FireMason automatically synthesizes new firewall rules for the existing firewall. This new firewall correctly handles packets specified by the examples, while maintaining the rest of the behaviors of the original firewall. Through a conversion of the firewalls to SMT formulas, we offer formal guarantees that the change is correct. Our evaluation results from real-world case studies show that FireMason can efficiently find repairs.
登录
查看更多内容
hol-TestGen/fw - 基于规范的防火墙一致性测试环境
DOI：
10.1007/978-3-642-39718-9_7
发表时间：
2013
期刊：
Comput. Secur.
影响因子：
--
作者：
Achim D. Brucker;Lukas Brügger;B. Wolff
通讯作者：
B. Wolff
ACLA：访问控制列表 (ACL) 分析和优化的框架
影响因子：
16.4
作者：
J. Qian
通讯作者：
J. Qian
智能防火墙测试的策略分段
DOI：
10.1109/npsec.2005.1532056
发表时间：
2005
期刊：
1st IEEE ICNP Workshop on Secure Network Protocols, 2005. (NPSec).
影响因子：
--
作者：
A. El;Khaled Ibrahim;H. Hamed;E. Al
通讯作者：
E. Al
参考论文：使用防火墙内部数据流模型理解防火墙漏洞的框架1 1这项工作得到了普渡大学信息保障和安全教育与研究中心 (CERIAS) 的赞助商的支持。
影响因子：
5.6
作者：
Michael Frantzen;F. Kerschbaum;E. Schultz;S. Fahmy
通讯作者：
S. Fahmy
使用SAT和QBF验证和综合防火墙
DOI：
10.1109/icnp.2012.6459944
发表时间：
2012
期刊：
2012 20th IEEE International Conference on Network Protocols (ICNP)
影响因子：
--
作者：
Shuyuan Zhang;Abdulrahman Mahmoud;S. Malik;S. Narain
通讯作者：
S. Narain