A bit vector-based diagnosis mechanism for firewall rule anomalies in IPv6 networking environment

Chi Shih Chao, Stephen J.H. Yang

研究成果: 雜誌貢獻期刊論文同行評審

3 引文 斯高帕斯(Scopus)

摘要

Firewalls are what some consider to be the most essential devices which can safeguard networks. Misconfigurations of firewall rules often lead to rule anomalies which can be easily used by network attacks to paralyze the managed network. However, finding such rule anomalies is no easy task due to its time-consuming, laboring, strenuous characteristics. What’s worse is, with the massive and increasing deployment of IPv6 in the current Internet, anomaly diagnosis for firewall rules becomes even harder. In this paper, a bit vector-based anomaly diagnosis approach is proposed and realized where it can pinpoint anomalies among IPv6 firewall rules not only effectively, but also much more efficiently and more easily. As a result, a visualized platform for our IPv6 firewall rule anomaly diagnosis has been implemented and comprehensive performance evaluations on anomaly diagnosis have been conducted also, in which our developed approach shows its excellence and feasibility.

原文???core.languages.en_GB???
頁(從 - 到)867-876
頁數10
期刊Journal of Internet Technology
22
發行號4
DOIs
出版狀態已出版 - 2021

指紋

深入研究「A bit vector-based diagnosis mechanism for firewall rule anomalies in IPv6 networking environment」主題。共同形成了獨特的指紋。

引用此