A Proposed Tool for Planning and Verification of Firewalling Policy
| Autor: | Yi-Liang Chen, 陳怡良 |
|---|---|
| Rok vydání: | 2005 |
| Druh dokumentu: | 學位論文 ; thesis |
| Popis: | 93 In order to reduce a lot of damage from information security incidents, there are many organizations set up firewalls between internet and intranet for protecting. However, that is not preventing the half information security incidents causing by inner organization. Besides, the precautions of information security incidents can not be done well if only use firewalls. Ordering suitable firewall policies and building firewalls that are conforming to policies is more important. This research abstracts firewall model from the attributes and specialties of firewalls, then according firewall model to bring up Firewall Policies Normalization Model and the Drawings of Firewall Architecture. This model assists to analyze firewall policies and firewall architecture. Using Firewall Policies Normalization Model can transfer network service policy into firewall design policy, and according the meaning of firewall policies to delete the redundancies. The Drawings of Firewall Architecture are showing the connection of protected entities in security policies, and the connection between protected entities and firewall entities. It is showing a firewall architecture conforming the meaning of all security policies and have no redundancy. It will make people understanding the relation between entities and entities easier. When planning network architecture of organization, the Firewall Policies Normalization Model and the Drawings of Firewall Architecture can assist planning networks architecture which is conforming security policies. In the condition of having network topology, where the firewalls should be implemented can be inferred clearly. Under the network topology of configuring firewalls, we can use Firewall Policy Normalization Model and Drawings of Firewall Model to review the suitableness of network topology of organization. |
| Databáze: | Networked Digital Library of Theses & Dissertations |
| Externí odkaz: |
|