Formal security policy implementations in network firewalls

Macfarlane, Richard; Buchanan, William; Ekonomou, Elias; Uthmani, Omair; Fan, Lu; Lo, Owen

Abstract

Network security should be based around security policies. From high-level natural language, non-technical, policies created by management, down to device and vendor specific policies, or configurations, written by network system administrators. There exists a multitude of research into policy-based network systems which has been undertaken. This paper provides an overview of the different type of policies relating to security in networks, and a taxonomy of the research into systems which have been proposed to support the network administrators in difficult tasks of creating, managing and deploying these policies.

Citation

Macfarlane, R., Buchanan, W., Ekonomou, E., Uthmani, O., Fan, L., & Lo, O. (2012). Formal security policy implementations in network firewalls. Computers and Security, 31(2), 253-270. https://doi.org/10.1016/j.cose.2011.10.003

• Journal Article Type: Article
• Acceptance Date: Oct 13, 2011
• Online Publication Date: Oct 29, 2011
• Publication Date: 2012-03
• Deposit Date: May 30, 2011
• Publicly Available Date: Oct 29, 2011
• Journal: Computers & Security
• Print ISSN: 0167-4048
• Publisher: Elsevier
• Peer Reviewed: Peer Reviewed
• Volume: 31
• Issue: 2
• Pages: 253-270
• DOI: https://doi.org/10.1016/j.cose.2011.10.003
• Keywords: Security policy; Firewalls; Policy enforcement; Firewall policy management systems; Policy visualisation; Reverse engineering security policies
• Public URL: http://researchrepository.napier.ac.uk/id/eprint/4430
• Contract Date: May 30, 2011