Model-Based Tool-Assistance for Packet-Filter Design

Lück, Ingo; Schäfer, Christian; Krumm, Heiko

doi:10.1007/3-540-44569-2_8

Cited by 21 publications

(18 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [6], the authors adopted a better approach by using a modular architecture that separates the security policy and the underlying network topology to allow for flexible modification of the network topology without the need to update the security policy. Similar work has been done in [14] with a procedural policy definition language, and in [16] with an object-oriented policy definition language. In terms of distributed firewall policy enforcement, a novel architecture is proposed in [15] where the authors suggest using a trust management system to enforce a centralized security policy at individual network endpoints based on access rights granted to users or hosts.…”

Section: Related Workmentioning

confidence: 92%

Towards a Unified Modeling and Verification of Network and System Security Configurations

Alsaleh

Al-Shaer

El-Atawy

2013

Automated Security Management

View full text Add to dashboard Cite

Abstract-Systems and networks access control configuration are usually analyzed independently although they are logically combined to define the end-to-end security property. While systems and applications security policies define access control based on user identity or group, request type and the requested resource, network security policies uses flow information such as host and service addresses for source and destination to define access control. Therefore, both network and systems access control have to be configured consistently in order to enforce endto-end security policies. Many previous research attempt to verify either side separately, but it does not provide a unified approach to automatically validate the logical consistency between both of them. Thus, using existing techniques requires error-prone manual and ad-hoc analysis to validate this link.In this paper, we introduce a cross-layer modeling and verification system that can analyze the configurations and policies across both application and network components as a single unit. It combines policies from different devices as firewalls, NAT, routers and IPSec gateways as well as basic RBACbased policies of higher service layers. This allows analyzing, for example, firewall polices in the context of application access control and vice versa. Thus, by incorporating policies across the network and over multiple layers, we provide a true endto-end configuration verification tool. Our model represents the system as a state machine where packet header, service request and location determine the state and transitions that conform with the configuration, device operations, and packet values are established. We encode the model as Boolean functions using binary decision diagrams (BDDs). We used an extended version of computational tree logic (CTL) to provide more useful operators and then use it with symbolic model checking to prove or find counter examples to needed properties. The tool is implemented and we gave special consideration to efficiency and scalability.

show abstract

Section: Related Workmentioning

confidence: 92%

Towards a Unified Modeling and Verification of Network and System Security Configurations

Alsaleh

Al-Shaer

El-Atawy

2013

Automated Security Management

View full text Add to dashboard Cite

show abstract

“…. , pc m is the sequence of processes in aep 1 ∧ pc x = pc i ∧ pc y = pc i+1 for 1 ≤ i < m (16) and ∀ pc z , pc w ∈ Pc : ∃ p 2 = pc z , . .…”

Section: A1 Generalisation Theoremmentioning

confidence: 99%

“…Model-based Management (MBM) [16,17] is a policy-based approach that employs an object-oriented layered model. It aims to provide a smooth transition from an abstract view of the system to be managed and the policies that apply to it down to reaching a detailed system representation at the most inferior layer.…”

Section: Previous Workmentioning

confidence: 99%

See 1 more Smart Citation

Formal validation of automated policy refinement in the management of network security systems

Albuquerque

Krumm

Geus

2010

Int. J. Inf. Secur.

Self Cite

View full text Add to dashboard Cite

Policy hierarchies and automated policy refinement are powerful approaches to simplify administration of security services in complex network environments. A crucial issue for the practical use of these approaches is to ensure the validity of the policy hierarchy, i.e. since the policy sets for the lower levels are automatically derived from the abstract policies (defined by the modeller), we must be sure that the derived policies uphold the high-level ones. This paper builds upon previous work on Model-based Management, particularly on the Diagram of Abstract Subsystems approach, and goes further to propose a formal validation approach for the policy hierarchies yielded by the automated policy refinement process. We establish general validation conditions for a multi-layered policy model, i.e. necessary and sufficient conditions that a policy hierarchy must satisfy so that the lower-level policy sets are valid refinements of the higher-level policies according to the criteria of consistency and completeness. Relying upon the validation conditions and upon axioms about the model representativeness, two theorems are proved to ensure compliance between the resulting system behaviour and the abstract policies that are modelled.

show abstract

“…In comparison to that, model-based management [6] uses very high-level policies to describe the desired behavior. Due to the utilization of a system model, the low-level policies and concrete service configurations can automatically be created by the tool.…”

Section: Model Structurementioning

confidence: 99%

Model-driven security management of embedded service systems

Illner

Pohl

Krumm

2005

31st Annual Conference of IEEE Industrial Electronics Society, 2005. IECON 2005.

View full text Add to dashboard Cite

Abstract-The paradigm of Service Oriented Architectures spreads throughout the domain of business software and enterprise networks. With the proposal of the Device Profile for Web-Services also small, less powerful embedded devices should be able to interact with services of the network infrastructure they are connected to. New challenges arise when it comes to the adaptive management of these devices. The available computing power is often too low to allow extensive runtime evaluations for automatic adaptation to new situations. Moreover when thinking of large scaled device networks the creation and management of security policies may become a complex task. In this paper we address the latter by splitting the security management task into a design-time and run-time task. At design-time the considered access control policy is graphically modeled applying the concepts of Role Based Access Control and the definition is aided by a modeling tool. At run-time the configurations created by this tool are the basis for the access control computations of a security service infrastructure.

show abstract

Model-Based Tool-Assistance for Packet-Filter Design

Cited by 21 publications

References 12 publications

Towards a Unified Modeling and Verification of Network and System Security Configurations

Towards a Unified Modeling and Verification of Network and System Security Configurations

Formal validation of automated policy refinement in the management of network security systems

Model-driven security management of embedded service systems

Contact Info

Product

Resources

About