Policy-Based Network Security Management Model for Multiple Security Devices
0
조회
0
다운로드
0
인용
0
참고문헌
초록
Abstract
Today, even a moderately sized corporate network contains multiple security devices which provide various security services like packet filtering, VPN, NAT and Proxy. Configuring these devices to work in unison is difficult, especially if these security services are enforced over multiple devices. We propose a new policy-based network security management model based on the complete analysis of the security services-VPN, NAT and Proxy, let alone packet filtering. Our model is able to automatically generate and distribute complex security rules to each security devices. We believe that this study will help the security administrator to manage his/her multiple security devices only with the simple concept of security policy rather than complex security rules for each device. Also, it does not make redundant security rules unnecessarily.
참고문헌 (26)
- "Fang: A Firewall Analysis Engine" (2000)
- "An Examination of Firewall Architectures, Cyberguard"
- "An overview of firewall technologies", 96(3- 2000), pp.47~52 (2000)
- "Request for Comments: 3022"
- "Firmato: a novel firewall management toolkit", pp.17~31
- "Firewall and Internet Security: Repelling the Wily Hacker" (1994), Addison-Wesley
- "Firewalls", University of Helsinki
- "Transparent Network Security Policy Enforcement", pp.215~226
- "Distributed firewalls. ;login: magazine, special issue on security"
- "Architecting the Lumeta firewall analyzer"
- "Implementing a Distributed Firewall", pp.190~199
- "http:", pp.2001[DOI]
- "Algorithms for Packet Classification"
- "Fast and Scalable Layer Four Switching" (1998)
- "Algorithms for Improving the Dependability of Firewall and Filter Rule Lists" (2000)
- "routing plugins: A modular and Extensible software framework for modern high performance integrated services routers"
- "Detecting and Resolving Packet Filter Conflicts"
- "Filtering postures: Local enforcement for global policies" (1997)
- "Improving Packet Filters Management through Automatic and Dynamic Schemes"
- "Linux Firewall" (2000), NewRiders
- "The Proceedings Of The Korean Institute Of Communication Sciences", 17(3), pp.97~110 (2000)
- "Web security source book" (1997), Wiley Computer Publishing
- "TCP", IP Illustrated, 1996., pp.1, ~[DOI]
- "IPSEC: The New Security Standard for the Internet" (1999), Prentice Hall
- "Introduction to Algorithms", vi graph algorithms (1994), MIT Press
- "Request For Comments: 1760" (1995)