Discovery of policy anomalies in distributed firewalls

467 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

FIREMAN: a toolkit for firewall modeling and analysis (2006, methodology): “Our algorithm scales better than Al-Shaer’s, which compares two rules at a time and has an O(n(2)) complexity [11].”
Debugging the data plane with anteater (2011, background): “As a result, these tools generally focus on checking correctness of a single protocol such as BGP [14, 15] or ﬁrewalls [2, 43].”
A General Approach to Network Configuration Analysis (2015, background): “The first approach directly analyzes network configuration files [2] [5] [7] [24] [25] [28] [34].”
Conflict classification and analysis of distributed firewall policies (2005, background): “We first illustrate the simple case of multiple cascaded firewalls isolating two network subdomains, where the firewalls are installed at the routing points in the network [2].”
FlowChecker: configuration analysis and verification of federated openflow infrastructures (2010, methodology): “For example, firewall modeling and conflict analysis were targeted by ( [4], [11], [14], and [20]).”