NDLI: Mining policies from enterprise network configuration

Please wait, while we are loading the content...

ANTIDOTE: understanding and defending against poisoning of anomaly detectors

Understanding online social network usage from a network perspective

TCP revisited: a fresh look at TCP in the wild

Characterizing VLAN-induced sharing in a campus network

Sampling biases in network path measurements and what to do about it

Moving beyond end-to-end path information to optimize CDN performance

Impact of prefix-match changes on IP reachability

Measuring serendipity: connecting people, locations and interests in a mobile 3G network

Mining communities in networks: a solution for consistency and its evaluation

IXPs: mapped?

Non-intrusive, dynamic interference detection for 802.11 networks

Live streaming performance of the Zattoo network

When private keys are public: results from the 2008 Debian OpenSSL vulnerability

Characterizing user behavior in online social networks

On dominant characteristics of residential broadband internet traffic

Challenging statistical classification for operational usage: the ADSL case

An analysis of packet sampling in the frequency domain

The nature of data center traffic: measurements & analysis

Internet optometry: assessing the broken glasses in internet reachability

Energy consumption in mobile phones: a measurement study and implications for network applications

Evolution of an online social aggregation network: an empirical study

Understanding slow BGP routing table transfers

The importance of being overheard: throughput gains in wireless mesh networks

Modeling user activities in a large IPTV system

Anomaly extraction in backbone networks using association rules

Network level footprints of facebook applications

Detecting traffic differentiation in backbone ISPs with NetPolice

Mining policies from enterprise network configuration

Triangle inequality variations in the internet

Characterizing podcast services: publishing, usage, and dissemination

Measurement methods for fast and accurate blackhole identification with binary tomography

Where's that phone?: geolocating IP addresses on 3G networks

Scalable proximity estimation and link prediction in online social networks

Understanding the efficacy of deployed internet source address validation filtering

Impact of transient CSMA/CA access delays on active bandwidth measurements

Inside the bird's nest: measurements of large-scale live VoD from the 2008 olympics

On calibrating enterprise switch measurements

Geolocalization of proxied services and its application to fast-flux hidden servers

One-click hosting services: a file-sharing hideout

Quantifying ases multiconnectivity using multicast information

Practical beamforming based on RSSI measurements using off-the-shelf wireless clients

Mining policies from enterprise network configuration

Content Provider	ACM Digital Library
Author	Akella, Aditya Maltz, David A. Benson, Theophilus
Abstract	Few studies so far have examined the nature of reachability policies in enterprise networks. A better understanding of reachability policies could both inform future approaches to network design as well as current network configuration mechanisms. In this paper, we introduce the notion of a policy unit, which is an abstract representation of how the policies implemented in a network apply to different network hosts. We develop an approach for reverse-engineering a network's policy units from its router configuration. We apply this approach to the configurations of five productions networks, including three university and two private enterprises. Through our empirical study, we validate that policy units capture useful characteristics of a network's policy. We also obtain insights into the nature of the policies implemented in modern enterprises. For example, we find most hosts in these networks are subject to nearly identical reachability policies at Layer 3.
Starting Page	136
Ending Page	142
Page Count	7
File Format	PDF
ISBN	9781605587714
DOI	10.1145/1644893.1644909
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-11-04
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Configuration management
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Mining Policies From Enterprise Network Configuration

Firewalls policies enhancement strategies towards securing network

Towards systematic design of enterprise networks

From attack graphs to automated configuration management — an iterative approach.

Characterization of Corpora from Enterprise Technology Creation for Retrieval and Mining

Developing an enterprise information security policy

The application of data mining to customer credit analysis in medicament enterprise

Firewall configuration management using XACML policies

Practical declarative network management (2009)

Mining policies from enterprise network configuration

Similar Documents

Mining Policies From Enterprise Network Configuration

Firewalls policies enhancement strategies towards securing network

Towards systematic design of enterprise networks

From attack graphs to automated configuration management — an iterative approach.

Characterization of Corpora from Enterprise Technology Creation for Retrieval and Mining

Developing an enterprise information security policy

The application of data mining to customer credit analysis in medicament enterprise

Firewall configuration management using XACML policies

Practical declarative network management (2009)

Mining policies from enterprise network configuration