Abstract
Firewalls are a widely deployed security mechanism to ensure the security of private networks in most businesses and institutions. The effectiveness of security protection provided by a firewall mainly depends on the quality of policy configured in the firewall. However, designing and managing firewall policies are often error-prone due to the complex nature of firewall configurations as well as the lack of systematic analysis mechanisms and tools. This paper represents an innovative anomaly management framework for firewalls, adopting a rule-based segmentation technique to identify policy anomalies and derive effective anomaly resolutions. In particular, we articulate a grid-based representation technique for providing an intuitive cognitive sense about policy anomaly and facilitating efficient policy anomaly management. In addition, we demonstrate the feasibility and applicability of our framework through a proof-of-concept prototype of a visualization-based firewall policy analysis tool called Firewall Anomaly Management Environment (FAME).
| Original language | English (US) |
|---|---|
| Title of host publication | Proceedings of the ACM Conference on Computer and Communications Security |
| Pages | 17-26 |
| Number of pages | 10 |
| DOIs | |
| State | Published - 2010 |
| Event | 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10 - Chicago, IL, United States Duration: Oct 4 2010 → Oct 8 2010 |
Other
| Other | 3rd ACM Workshop on Assurable and Usable Security Configuration, SafeConfig '10, Co-located with CCS'10 |
|---|---|
| Country | United States |
| City | Chicago, IL |
| Period | 10/4/10 → 10/8/10 |
Fingerprint
Keywords
- anomaly management
- firewall policies
- visualization tool
ASJC Scopus subject areas
- Software
- Computer Networks and Communications
Cite this
FAME : A firewall anomaly management environment. / Hu, Hongxin; Ahn, Gail-Joon; Kulkarni, Ketan.
Proceedings of the ACM Conference on Computer and Communications Security. 2010. p. 17-26 1866902.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
}
TY - GEN
T1 - FAME
T2 - A firewall anomaly management environment
AU - Hu, Hongxin
AU - Ahn, Gail-Joon
AU - Kulkarni, Ketan
PY - 2010
Y1 - 2010
N2 - Firewalls are a widely deployed security mechanism to ensure the security of private networks in most businesses and institutions. The effectiveness of security protection provided by a firewall mainly depends on the quality of policy configured in the firewall. However, designing and managing firewall policies are often error-prone due to the complex nature of firewall configurations as well as the lack of systematic analysis mechanisms and tools. This paper represents an innovative anomaly management framework for firewalls, adopting a rule-based segmentation technique to identify policy anomalies and derive effective anomaly resolutions. In particular, we articulate a grid-based representation technique for providing an intuitive cognitive sense about policy anomaly and facilitating efficient policy anomaly management. In addition, we demonstrate the feasibility and applicability of our framework through a proof-of-concept prototype of a visualization-based firewall policy analysis tool called Firewall Anomaly Management Environment (FAME).
AB - Firewalls are a widely deployed security mechanism to ensure the security of private networks in most businesses and institutions. The effectiveness of security protection provided by a firewall mainly depends on the quality of policy configured in the firewall. However, designing and managing firewall policies are often error-prone due to the complex nature of firewall configurations as well as the lack of systematic analysis mechanisms and tools. This paper represents an innovative anomaly management framework for firewalls, adopting a rule-based segmentation technique to identify policy anomalies and derive effective anomaly resolutions. In particular, we articulate a grid-based representation technique for providing an intuitive cognitive sense about policy anomaly and facilitating efficient policy anomaly management. In addition, we demonstrate the feasibility and applicability of our framework through a proof-of-concept prototype of a visualization-based firewall policy analysis tool called Firewall Anomaly Management Environment (FAME).
KW - anomaly management
KW - firewall policies
KW - visualization tool
UR - http://www.scopus.com/inward/record.url?scp=78650166376&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=78650166376&partnerID=8YFLogxK
U2 - 10.1145/1866898.1866902
DO - 10.1145/1866898.1866902
M3 - Conference contribution
SN - 9781450300933
SP - 17
EP - 26
BT - Proceedings of the ACM Conference on Computer and Communications Security
ER -