Marchi, M. and Penzo, R. and Provetti, Alessandro (2007) Policy-based parametric firewall configuration: a real-case application. In: UNSPECIFIED (ed.) 8th IEEE International Workshop on Policies for Distributed Systems and Networks: POLICY 2007. IEEE Computational Intelligence Society. ISBN 0769527671.
Abstract
We describe a simple policy language for setting up and running firewalls (FW). The language allows to describe sophisticated policies for controlling network connections. Composition is done at set-up time, when a parser, starting from a given policy, generates the relative configuration file for one or more firewalls operating the industry-standard Linux Iptables kernel extension. The policy captures the essence of the desired requirements and constrains upon connections between zones. The language has been designed and it is currently on testing in the context of a large intra/extranet with more than 10,000 assigned IP addresses.
Metadata
| Item Type: | Book Section |
|---|---|
| School: | Birkbeck Faculties and Schools > Faculty of Science > School of Computing and Mathematical Sciences |
| Depositing User: | Sarah Hall |
| Date Deposited: | 13 Jul 2021 14:51 |
| Last Modified: | 09 Aug 2023 12:51 |
| URI: | https://eprints.bbk.ac.uk/id/eprint/45094 |
Statistics
Additional statistics are available via IRStats2.
Archive Staff Only (login required)
