Show simple item record

dc.contributor.authorBandara, A. K.en
dc.contributor.authorKakas, Antonis C.en
dc.contributor.authorLupu, E. C.en
dc.contributor.authorRusso, A.en
dc.creatorBandara, A. K.en
dc.creatorKakas, Antonis C.en
dc.creatorLupu, E. C.en
dc.creatorRusso, A.en
dc.description.abstractFirewalls remain the main perimeter security protection for corporate networks. However, network size and complexity make firewall configuration and maintenance notoriously difficult. Tools are needed to analyse firewall configurations for errors, to verify that they correctly implement security requirements and to generate configurations from higher-level requirements. In this paper we extend our previous work on the use of formal argumentation and preference reasoning for firewall policy analysis and develop means to automatically generate firewall policies from higher-level requirements. This permits both analysis and generation to be done within the same framework, thus accommodating a wide variety of scenarios for authoring and maintaining firewall configurations. We validate our approach by applying it to both examples from the literature and real firewall configurations of moderate size (̃ 150 rules). © 2009 IEEE.en
dc.source2009 IFIP/IEEE International Symposium on Integrated Network Management, IM 2009en
dc.source2009 IFIP/IEEE International Symposium on Integrated Network Management, IM 2009en
dc.subjectNetwork managementen
dc.subjectComputer virusesen
dc.subjectSecurity requirementsen
dc.subjectComputer system firewallsen
dc.subjectConfiguration managementen
dc.subjectCorporate networksen
dc.subjectFirewall policiesen
dc.subjectFormal argumentationen
dc.subjectNetwork sizeen
dc.subjectPerimeter securityen
dc.subjectPreference reasoningen
dc.titleUsing argumentation logic for firewall configuration managementen
dc.description.endingpage187 Σχολή Θετικών και Εφαρμοσμένων Επιστημών / Faculty of Pure and Applied SciencesΤμήμα Πληροφορικής / Department of Computer Science
dc.type.uhtypeConference Objecten
dc.description.notes<p>Conference code: 78288en
dc.description.notesCited By :22</p>en
dc.contributor.orcidKakas, Antonis C. [0000-0001-6773-3944]

Files in this item


There are no files associated with this item.

This item appears in the following Collection(s)

Show simple item record