Ponencia
Fast Algorithms for Local Inconsistency Detection in Firewall ACL Updates
Autor/es | Pozo Hidalgo, Sergio
Ceballos Guerrero, Rafael Martínez Gasca, Rafael Varela Vaca, Ángel Jesús |
Departamento | Universidad de Sevilla. Departamento de Lenguajes y Sistemas Informáticos |
Fecha de publicación | 2008 |
Fecha de depósito | 2022-02-15 |
Publicado en |
|
ISBN/ISSN | 2162-2108 |
Resumen | Filtering is a very important issue in next
generation networks. These networks consist of a
relatively high number of resource constrained devices
with very special features, such as managing frequent
topology changes. ... Filtering is a very important issue in next generation networks. These networks consist of a relatively high number of resource constrained devices with very special features, such as managing frequent topology changes. At each topology change, the access control policy of all nodes of the network must be automatically modified. In order to manage these access control requirements, Firewalls have been proposed by several researchers. However, many of the problems of traditional firewalls are aggravated due to these networks particularities. In this paper we deeply analyze the local consistency problem in firewall rule sets, with special focus on automatic frequent rule set updates, which is the case of the dynamic nature of next generation networks. We propose a rule order independent local inconsistency detection algorithm to prevent automatic rule updates that can cause inconsistencies. The proposed algorithms have very low computational complexity as experimental results will show, and can be used in real time environments. |
Agencias financiadoras | Ministerio de Educación y Ciencia (MEC). España |
Identificador del proyecto | DPI2006-15476-C02-01 |
Cita | Pozo Hidalgo, S., Ceballos Guerrero, R., Martínez Gasca, R. y Varela Vaca, Á.J. (2008). Fast Algorithms for Local Inconsistency Detection in Firewall ACL Updates. En SECURWARE 2008: Second International Conference on Emerging Security Information, Systems and Technologies (381-390), Cap Esterel, France: IEEE Computer Society. |
Ficheros | Tamaño | Formato | Ver | Descripción |
---|---|---|---|---|
Fast algorithms for local ... | 373.1Kb | [PDF] | Ver/ | |