Pozo Hidalgo, SergioCeballos Guerrero, RafaelMartínez Gasca, RafaelVarela Vaca, Ángel Jesús2022-02-152022-02-152008Pozo Hidalgo, S., Ceballos Guerrero, R., Martínez Gasca, R. y Varela Vaca, Á.J. (2008). Fast Algorithms for Local Inconsistency Detection in Firewall ACL Updates. En SECURWARE 2008: Second International Conference on Emerging Security Information, Systems and Technologies (381-390), Cap Esterel, France: IEEE Computer Society.2162-2108https://hdl.handle.net/11441/129973Filtering is a very important issue in next generation networks. These networks consist of a relatively high number of resource constrained devices with very special features, such as managing frequent topology changes. At each topology change, the access control policy of all nodes of the network must be automatically modified. In order to manage these access control requirements, Firewalls have been proposed by several researchers. However, many of the problems of traditional firewalls are aggravated due to these networks particularities. In this paper we deeply analyze the local consistency problem in firewall rule sets, with special focus on automatic frequent rule set updates, which is the case of the dynamic nature of next generation networks. We propose a rule order independent local inconsistency detection algorithm to prevent automatic rule updates that can cause inconsistencies. The proposed algorithms have very low computational complexity as experimental results will show, and can be used in real time environments.application/pdf10engAttribution-NonCommercial-NoDerivatives 4.0 Internacionalhttp://creativecommons.org/licenses/by-nc-nd/4.0/info:eu-repo/semantics/conferenceObjectinfo:eu-repo/semantics/openAccesshttps://doi.org/10.1109/SECURWARE.2008.40