Automated Firewall Analytics

1. Front Matter

   Pages i-xiii

   PDF

2. Classification and Discovery of Firewalls Policy Anomalies

   • Ehab Al-Shaer

   Pages 1-24

3. Modeling and Verification of Firewall and IPSec Policies Using Binary Decision Diagrams

   • Ehab Al-Shaer

   Pages 25-48

4. Specification and Refinement of a Conflict-Free Distributed Firewall Configuration Language

   • Ehab Al-Shaer

   Pages 49-74

5. Design and Configuration of Firewall Architecture Under Risk, Usability and Cost Constraints

   • Ehab Al-Shaer

   Pages 75-94

6. Dynamic Firewall Configuration Optimization

   • Ehab Al-Shaer

   Pages 95-127

7. Back Matter

   Pages 129-132

   PDF

This book provides a comprehensive and in-depth study of automated firewall policy analysis for designing, configuring and managing distributed firewalls in large-scale enterpriser networks. It presents methodologies, techniques and tools for researchers as well as professionals to understand the challenges and improve the state-of-the-art of managing firewalls systematically in both research and application domains. Chapters explore set-theory, managing firewall configuration globally and consistently, access control list with encryption, and authentication such as IPSec policies. The author also reveals a high-level service-oriented firewall configuration language (called FLIP) and a methodology and framework for designing optimal distributed firewall architecture. The chapters illustrate the concepts, algorithms, implementations and case studies for each technique. Automated Firewall Analytics: Design, Configuration and Optimization is appropriate for researchers and professionals working with firewalls. Advanced-level students in computer science will find this material suitable as a secondary textbook or reference.

• Access controls
• Automated firewall analytics
• Configuration anomalies detection
• Configuration management
• Distributed firewalls
• Firewall configuration language
• Firewalls
• Global network configuration
• Large scale enterpriser networks
• Network access control configuration
• Security analytics
• Security management
• System security

• University of North Carolina Charlotte, Charlotte, USA

  Ehab Al-Shaer

Policies and ethics