GDL

Journal from gdlhub / 2018-10-16 14:22:50
Oleh : Ahmed Khoumsi, Mohammed Erradi, Wadie Krombi, King Saud University
Dibuat : 2018-06-02, dengan 1 file

Keyword : Firewall security policyAutomata-based policyCompleteness verificationAnomaly detectionDiscrepancy detectionMixable policySpace and time complexities
Url : http://www.sciencedirect.com/science/article/pii/S1319157816301185
Sumber pengambilan dokumen : WEB

A firewall is the core of a well defined network security policy. This paper presents an automata-based method to study firewall security policies. We first propose a procedure that synthesizes an automaton that describes a security policy given as a table of rules. The synthesis procedure is then used to develop procedures to detect: incompleteness, anomalies and discrepancies in security policies. A method is developed to represent the automaton by a policy qualified as mixable and that has practical utilities, such as ease to determine the whitelist and the blacklist of the policy. The developed procedures have been deeply evaluated in terms of time and space complexities. Then, a real case study has been investigated. The obtained results confirm that the developed procedures have reasonable complexities and that their actual execution times are of the order of seconds. Finally, proofs of all results are provided.

Beri Komentar ?#(0) | Bookmark

Properti	Nilai Properti
ID Publisher	gdlhub
Organisasi	King Saud University
Nama Kontak	Herti Yani, S.Kom
Alamat	Jln. Jenderal Sudirman
Kota	Jambi
Daerah	Jambi
Negara	Indonesia
Telepon	0741-35095
Fax	0741-35093
E-mail Administrator	elibrarystikom@gmail.com
E-mail CKO	elibrarystikom@gmail.com