Network designers perform challenging tasks with so many configuration options that it is
often hard or even impossible for a human to predict all potentially dangerous situations. In …

This dissertation describes a technique for formally analyzing a firewall security policy using
a quasi-reduced multiway decision diagram model. The analysis allows a system …

Firewalls are a piece of software or hardware that control access to organization networks.
Packet filtering is placed in the heart of firewalls. It is performed by comparing each data …

The goal of this work is to propose a unified packet classification method combining routing,
level 3-to-level 2 address translation (ARP), and packet filtering, that can be implemented on …

Formal verification and validation techniques such as model checking are not widely used in
computer networks. These methods are very useful to identify configuration errors, identify …

This paper deals with an approach to security analysis of TCP/IP-based computer networks.
The method developed stems from a formal model of network topology with changing link …

In this paper, we present a novel approach for Binary Decision Diagram based semantically
extended representation of packet filters called Filter Decision Diagrams (FDD), used for …

The use of packet filters has increased considerably due to the growth of Internet users and
network services. A number of header fields must be examined by the filter, causing delay …

Network design that meets customer's security requirements needs careful considerations
when configuring routing and filtering rules. This paper deals with an approach to security …

Recently, several researches have suggested an application of formal methods for
identifying configuration errors, unveiling design problems and predicting network behavior …