Protocol Decode Based Stateful Firewall Policy Definition Language

Fifth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'04) p. 201
Protocol Decode Based Stateful Firewall Policy Definition Language
Pankaj N. Parmar, Intel Corporation
Priya Rajagopal, Intel Corporation
Ravi Sahita, Intel Corporation

Full Article Text:

DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/POLICY.2004.1309169
Send link to a friend

Abstract
The policies for thwarting attacks on systems vary greatly in complexity, ranging from simple static firewall rules to complex stateful protocol state machine analysis. As intrusion detection systems are getting integrated into firewall solutions, there is a need for a language that can define both firewall policies and system intrusion behavior and exhibit inter-operable traits. This paper presents an XML based, self-documenting State-Aware Firewall Language (SAFire) that is designed to express the various kinds of firewall and intrusion behavior.
Back to Top Additional Information
Citation: Pankaj N. Parmar, Priya Rajagopal, Ravi Sahita, "Protocol Decode Based Stateful Firewall Policy Definition Language," policy, p. 201, Fifth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'04), 2004

	Advanced Search
CS Search Google Search