Automated Firewall Analytics - Design, Configuration and Optimization

This book provides a comprehensive and in-depth study of automated firewall policy analysis for designing, configuring and managing distributed firewalls in large-scale enterpriser networks. It presents methodologies, techniques and tools for researchers as well as professionals to understand the challenges and improve the state-of-the-art of managing firewalls systematically in both research and application domains. Chapters explore set-theory, managing firewall configuration globally and consistently, access control list with encryption, and authentication such as IPSec policies. The author also reveals a high-level service-oriented firewall configuration language (called FLIP) and a methodology and framework for designing optimal distributed firewall architecture. The chapters illustrate the concepts, algorithms, implementations and case studies for each technique. Automated Firewall Analytics: Design, Configuration and Optimization is appropriate for researchers and professionals working with firewalls. Advanced-level students in computer science will find this material suitable as a secondary textbook or reference.

List of contents

Classification and Discovery of Firewalls Policy Anomalies.- Modeling and Verification of Firewall and IPSec Policies using Binary Decision Diagrams.- Specification and Refinement of a Conflict-Free Distributed Firewall Configuration Language.- Design and Configuration of Firewall Architecture Under Risk, Usability and Cost Constraints.- Dynamic Firewall Configuration Optimization.

Product details

• Authors: Ehab Al-Shaer
• Publisher: Springer, Berlin
• Languages: English
• Product format: Paperback / Softback
• Released: 01.01.2016
• EAN: 9783319363578
• ISBN: 978-3-31-936357-8
• No. of pages: 132
• Dimensions: 155 mm x 8 mm x 235 mm
• Weight: 236 g
• Illustrations: XIII, 132 p. 32 illus., 12 illus. in color.
• Subjects: Natural sciences, medicine, IT, technology > IT, data processing > IT; B, Kodierungstheorie und Verschlüsselung (Kryptologie), Netzwerk-Hardware, Kryptografie, Verschlüsselungstechnologie, computer science, Systems and Data Security, Data and Information Security, Computer Communication Networks, Information Systems and Communication Service, Computers, Network Security, Computer security, Coding theory & cryptology, Data encryption, Data encryption (Computer science), Cryptology, Computer communication systems, Database Management System, Computer networking & communications, Network hardware