This article summarizes our efforts around the formally verified static analysis of iptables
rulesets using Isabelle/HOL. We build our work around a formal semantics of the behavior of …

The private cloud system plays an important role in the present time because it has the
ability to adjust to work better based on the needs of users, such as an adjustment of …

Abstract Design and management of firewall rule sets is difficult and error prone, mainly
because the translation of access control requirements to low level languages is difficult …

The design and management of firewall rule sets is a very difficult and error-prone task
because of the difficulty of translating access control requirements into complex low-level …

The security provided by a firewall for a computer network almost completely depends on
the rules it enforces. For over a decade, it has been a well-known and unsolved problem that …

Firewalls provide the first line of defence of nearly all networked institutions today. However,
Firewall ACL management suffer some problems that need to be addressed in order to be …

Large systems are commonly internetworked. A security policy describes the communication
relationship between the networked entities. The security policy defines rules, for example …

Filtering is a very important issue in next generation networks. These networks consist of a
relatively high number of resource constrained devices with very special features, such as …

The continuous growth of attacks in the Internet causes to generate a number of rules in
security devices such as Intrusion Prevention Systems, firewalls, etc. Policy anomalies in …

传统的防火墙从检测规则冲突和调整规则排序两方面来提高防火墙性能, 但效果都不是很理想.
本文从优化防火墙过滤域排序这样的一个新角度, 依据信息增益理论构造决策树 …