Publication result detail

Static Analysis of Routing and Firewall Policy Configurations

ŠVÉDA, M.; RYŠAVÝ, O.; DE SILVA, G.; MATOUŠEK, P.; RÁB, J.

Original Title

Static Analysis of Routing and Firewall Policy Configurations

English Title

Static Analysis of Routing and Firewall Policy Configurations

Type

Paper in proceedings (conference paper)

Original Abstract

Network design that meets customer's security requirements needs careful considerations when configuring routing and filtering rules. This paper deals with an approach to security analysis based on reachability calculations in dynamically routed networks. The contribution consists of proposing routing abstract model that enables to extend existing reachability analysis approaches to obtain a finer approximation. This approximation captures the effect of routing on packets forwarding. Thus in the combination with reachability calculations based on packet filtering analysis it provides valuable information for a network designer on possible security issues in designed network.

English abstract

Network design that meets customer's security requirements needs careful considerations when configuring routing and filtering rules. This paper deals with an approach to security analysis based on reachability calculations in dynamically routed networks. The contribution consists of proposing routing abstract model that enables to extend existing reachability analysis approaches to obtain a finer approximation. This approximation captures the effect of routing on packets forwarding. Thus in the combination with reachability calculations based on packet filtering analysis it provides valuable information for a network designer on possible security issues in designed network.

Keywords

Reachability, routing, filtering, forwarding

Key words in English

Reachability, routing, filtering, forwarding

Authors

ŠVÉDA, M.; RYŠAVÝ, O.; DE SILVA, G.; MATOUŠEK, P.; RÁB, J.

RIV year

2013

Released

02.02.2012

Publisher

Springer Science+Business Media B.V.

Location

Heidelberg

ISBN

978-3-642-25205-1

Book

e-Business and Telecommunications

Edition

LNCS CCIS, Vol.222

ISBN

1865-0929

Periodical

Communications in Computer and Information Science

Volume

2012

Number

222

State

Federal Republic of Germany

Pages from

39

Pages to

53

Pages count

15

URL

https://www.scopus.com/record/display.uri?eid=2-s2.0-84857521040&origin=resultslist

BibTex

@inproceedings{BUT91464,
  author="Miroslav {Švéda} and Ondřej {Ryšavý} and Hidda Marakkala Gayan Ruchika {de Silva} and Petr {Matoušek} and Jaroslav {Ráb}",
  title="Static Analysis of Routing and Firewall Policy Configurations",
  booktitle="e-Business and Telecommunications",
  year="2012",
  series="LNCS CCIS, Vol.222",
  journal="Communications in Computer and Information Science",
  volume="2012",
  number="222",
  pages="39--53",
  publisher="Springer Science+Business Media B.V.",
  address="Heidelberg",
  doi="10.1007/978-3-642-25206-8\{_}2",
  isbn="978-3-642-25205-1",
  issn="1865-0929",
  url="https://www.scopus.com/record/display.uri?eid=2-s2.0-84857521040&origin=resultslist"
}

Documents

sveda_2012_ccis
sveda_2012_ccis-adapt