FIREMAN: a toolkit for firewall modeling and analysis

By Lihua Yuan, Jianning Mai, Zhendong Su, Hao Chen, Chen-Nee Chuah, Prasant Mohapatra. IEEE Symposium on Security and Privacy, 2006

489 citations recorded by the source corpus.

Subfields: Computational Theory and Mathematics, Computer Networks and Communications, Hardware and Architecture

View Paper: https://www.semanticscholar.org/paper/e1cfadb87793b3346ad6d17c0b4ff1995467efc7

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computational Theory and Mathematics

1. David Walker
2. Jennifer Rexford
3. Zhenming Liu
4. Ratul Mahajan
5. Todd D. Millstein

In Computer Networks and Communications

1. Jennifer Rexford
2. Ratul Mahajan
3. David Walker
4. George Varghese
5. Matthew C. Caesar
6. Nick McKeown
7. Saeed Al-Haj
8. Brighten Godfrey

In Hardware and Architecture

1. Jennifer Rexford
2. Ratul Mahajan
3. Saeed Al-Haj
4. Ehab S. Al-Shaer
5. George Varghese
6. David Walker
7. Nick McKeown
8. Ramesh Govindan

Citations in the corpus

• FlowChecker: configuration analysis and verification of federated openflow infrastructures (2010, methodology): “For example, firewall modeling and conflict analysis were targeted by ( [4], [11], [14], and [20]).”
• Practical Attack Graph Generation for Network Defense (2006, background): “Full and predictive graphs must evaluate a prerequisite once for each state that provides the prerequisite.”
• Debugging the data plane with anteater (2011, methodology): “To address this, automated tools for network diagnostics [14, 43] analyze configuration files constructed by operators.”
• VeriFlow: verifying network-wide invariants in real time (2012, unknown): “Analysis of configuration files [8,18] is useful, but cannot find bugs in router software and must be designed for specific configuration languages and control protocols.”
• A General Approach to Network Configuration Analysis (2015, background): “Similarly, FIREMAN [34] produces a " rule graph " structure to represent each ACL and analyzes these graphs.”
• Header Space Analysis: Static Checking for Networks (2012, background): “It also found a large and complex loop in an experimental loose source routing protocol in 4 minutes.”
• Optimizing the "one big switch" abstraction in software-defined networks (2013, background): “Distributing policy over the network perimeter: These works distribute a centralized firewall policy by placing rules for packets at their ingress switches [7, 17], or verify that the edge switch configurations realize the firewall policy [18].”