s'authentifier
version française rss feed

inria-00567858, version 2

Symbolic analysis of network security policies using rewrite systems

Tony Bourdier () 1, Horatiu Cirstea () 1

Symposium on Principles and Practices of Declarative Programming (2011) pp.77-88

Résumé : First designed to enable private networks to be opened up to the outside world in a secure way, the growing complexity of organizations make firewalls indispensable to control information flow within a company. The central role they hold in the security of the organization information make their management a critical task and that is why for years many works have focused on checking and analyzing firewalls. The composition of firewalls, taking into account routing rules, has nevertheless often been neglected. In this paper, we propose to specify all components of a firewall, ie filtering and translation rules, as a rewrite system. We show that such specifications allow us to handle usual problems such as comparison, structural analysis and query analysis. We also propose a formal way to describe the composition of firewalls (including routing) in order to build a whole network security policy. The properties of the obtained rewrite system are strongly related to the properties of the specified networks and thus, classical theoretical and practical tools can be used to obtain relevant security properties of the security policies.

  • 1 :  PAREO (INRIA Lorraine - LORIA)
  • INRIA – CNRS : UMR7503 – Université Henri Poincaré - Nancy I – Université Nancy II – Institut National Polytechnique de Lorraine (INPL)
  • Domaine : Informatique/Informatique et langage
    Informatique/Cryptographie et sécurité
  • Mots-clés : network security policies – composition – rewriting systems – regular tree languages – firewall
  • Versions disponibles :  v1 (23-02-2011) v2 (20-04-2011)
 
  • inria-00567858, version 2
  • oai:hal.inria.fr:inria-00567858
  • Contributeur : 
  • Soumis le : Mercredi 20 Avril 2011, 09:14:38
  • Dernière modification le : Jeudi 28 Juillet 2011, 09:42:55
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...
tous les articles de la base du CCSd...