dc.creator | Pozo Hidalgo, Sergio | es |
dc.creator | Ceballos Guerrero, Rafael | es |
dc.creator | Martínez Gasca, Rafael | es |
dc.creator | Varela Vaca, Ángel Jesús | es |
dc.date.accessioned | 2022-02-16T08:38:24Z | |
dc.date.available | 2022-02-16T08:38:24Z | |
dc.date.issued | 2008 | |
dc.identifier.citation | Pozo Hidalgo, S., Ceballos Guerrero, R., Martínez Gasca, R. y Varela Vaca, Á.J. (2008). Polynomial Heuristic Algorithms for Inconsistency Characterization in Firewall Rule Sets. En SECURWARE 2008: Second International Conference on Emerging Security Information, Systems and Technologies (53-61), Cap Esterel, France: IEEE Computer Society. | |
dc.identifier.issn | 2162-2108 | es |
dc.identifier.uri | https://hdl.handle.net/11441/129998 | |
dc.description.abstract | Firewalls provide the first line of defence of nearly
all networked institutions today. However, Firewall
ACLs could have inconsistencies, allowing traffic that
should be denied or vice versa. In this paper, we
analyze the inconsistency characterization problem as
a separate problem of the diagnosis one, and propose
formal definitions in order to characterize one-to-many
inconsistencies. We identify the combinatorial part of
the problem that generates exponential complexities in
combined diagnosis and characterization algorithms
proposed by other authors. Then we propose a
decomposition of the combinatorial problem in several
smaller combinatorial ones, which can effectively
reduce the complexity of the problem. Finally, we
propose an approximate heuristic and algorithms to
solve the problem in worst case polynomial time.
Although many algorithms have been proposed to
address this problem, all of them are combinatorial.
The presented algorithms are an heuristic way to solve
the problem with polynomial complexity. There are no
constraints on how rule field ranges are expressed. | es |
dc.description.sponsorship | Ministerio de Educación y Ciencia DPI2006-15476-C02-01 | es |
dc.format | application/pdf | es |
dc.format.extent | 9 | es |
dc.language.iso | eng | es |
dc.publisher | IEEE Computer Society | es |
dc.relation.ispartof | SECURWARE 2008: Second International Conference on Emerging Security Information, Systems and Technologies (2008), pp. 53-61. | |
dc.rights | Attribution-NonCommercial-NoDerivatives 4.0 Internacional | * |
dc.rights.uri | http://creativecommons.org/licenses/by-nc-nd/4.0/ | * |
dc.title | Polynomial Heuristic Algorithms for Inconsistency Characterization in Firewall Rule Sets | es |
dc.type | info:eu-repo/semantics/conferenceObject | es |
dc.type.version | info:eu-repo/semantics/submittedVersion | es |
dc.rights.accessRights | info:eu-repo/semantics/openAccess | es |
dc.contributor.affiliation | Universidad de Sevilla. Departamento de Lenguajes y Sistemas Informáticos | es |
dc.relation.projectID | DPI2006-15476-C02-01 | es |
dc.relation.publisherversion | https://ieeexplore.ieee.org/document/4622561 | es |
dc.identifier.doi | 10.1109/SECURWARE.2008.39 | es |
dc.publication.initialPage | 53 | es |
dc.publication.endPage | 61 | es |
dc.eventtitle | SECURWARE 2008: Second International Conference on Emerging Security Information, Systems and Technologies | es |
dc.eventinstitution | Cap Esterel, France | es |
dc.relation.publicationplace | New York, USA | es |
dc.contributor.funder | Ministerio de Educación y Ciencia (MEC). España | es |