Fang: a firewall analysis engine

By Alain J. Mayer, Avishai Wool, Elisha Ziskind. Proceeding 2000 IEEE Symposium on Security and Privacy. S&P 2000, 2000

325 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Conflict classification and analysis of distributed firewall policies (2005, methodology): “In [20] and [30], the authors developed a firewall analysis tool to perform customized queries on a set of filtering rules and extract the related rules in the policy.”
SANE: A Protection Architecture for Enterprise Networks (2006, background): “A variety of efforts have examined less error prone methods for policy specification [13], as well as how to detect policy errors automatically [33].”
Header Space Analysis: Static Checking for Networks (2012, methodology): “[9, 10, 11, 15], and work on routing failures [12, 13] are all tailored to IP networks.”
Using model checking to analyze network vulnerabilities (2000, background): “A more interesting approach is presented in FANG [10].”
Discovery of policy anomalies in distributed firewalls (2004, methodology): “In [17] and [25], the authors developed a firewall analysis tool to perform customized queries on a set of filtering rules and extract the related rules in the policy.”
FIREMAN: a toolkit for firewall modeling and analysis (2006, background): “Firmato and Fang [6, 7] are a set of management and analysis tools that interact with users on queries about firewall rules.”