A Quantitative Study of Firewall Configuration Errors

By Avishai Wool. Computer, 2004

463 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Practical Attack Graph Generation for Network Defense (2006, background): “We can take advantage of this property to generate “all sources, all targets” MP graphs, showing every malicious action that could take place from any host or attacker starting location to any host in the network.”
Ethane: taking control of the enterprise (2007, methodology): “We have implemented Ethane in both hardware and software, supporting both wired and wireless hosts.”
SANE: A Protection Architecture for Enterprise Networks (2006, background): “Even in this limited role, misconfiguration has been a persistent problem [46, 47].”
Security in Software Defined Networks: A Survey (2015, unknown): “A study on firewall configuration errors [4] shows that configuration complexity is one of the main reasons for security breaches in enterprise networks.”
FIREMAN: a toolkit for firewall modeling and analysis (2006, methodology): “Most rules listed in [1] can be encoded into the blacklist as well.”
Security for 5G and Beyond (2019, background): “A study on manual configurations of firewalls in [365] reveals that major security breaches occur due to the complexity of manual configurations.”