Sciweavers

Share
SECURWARE
2008
IEEE

Polynomial Heuristic Algorithms for Inconsistency Characterization in Firewall Rule Sets

9 years 5 months ago
Polynomial Heuristic Algorithms for Inconsistency Characterization in Firewall Rule Sets
Firewalls provide the first line of defence of nearly all networked institutions today. However, Firewall ACLs could have inconsistencies, allowing traffic that should be denied or vice versa. In this paper, we analyze the inconsistency characterization problem as a separate problem of the diagnosis one, and propose formal definitions in order to characterize one-to-many inconsistencies. We identify the combinatorial part of the problem that generates exponential complexities in combined diagnosis and characterization algorithms proposed by other authors. Then we propose a decomposition of the combinatorial problem in several smaller combinatorial ones, which can effectively reduce the complexity of the problem. Finally, we propose an approximate heuristic and algorithms to solve the problem in worst case polynomial time. Although many algorithms have been proposed to address this problem, all of them are combinatorial. The presented algorithms are an heuristic way to solve the proble...
Sergio Pozo Hidalgo, Rafael Ceballos, Rafael M. Ga
Added 01 Jun 2010
Updated 01 Jun 2010
Type Conference
Year 2008
Where SECURWARE
Authors Sergio Pozo Hidalgo, Rafael Ceballos, Rafael M. Gasca, A. J. Varela-Vaca
Comments (0)
books