Accepted Papers

  • Detection of Firewall Policy Anomalies in Real-time Distributed Network Security Appliances
    Ameya Hanamsagar,Bhagyashree Borate,Ninad Jane,Aditi Wasvand and Santosh Darade, Sinhgad Institute of Technology & Science,India.
    ABSTRACT
    With the advent of emerging technologies like cloud computing, the security of confidential data is of prime importance. Firewalls are widely used as the most basic security device used to protect a network from unauthorized access and network intrusions. Network Administrators define some rules to filter incoming and outgoing packets which form the security policy of the firewall. The large size of firewall policies create complex interactions between policies of the same firewall as well as between multiple firewalls. In this paper, we extend the currently known classification for firewall policy anomalies. Further, we propose a tool which obtains these rules from security devices in real-time environment, detects the anomalies present in them according to the underlying network topology and propagates the consistent rules with the consent of administrator. Currently, the tool can only be used with Cisco security devices; however, it can be extended to incorporate the syntax of other vendor’s devices as well.
Copyright ® CNSA 2015