NDLI: Rigorous automated network security management

Content Provider	Springer Nature Link
Author	Guttman, Joshua D. Herzog, Amy L.
Copyright Year	2004
Abstract	Achieving a security goal in a networked system requires the cooperation of a variety of devices, each device potentially requiring a different configuration. Many information security problems may be solved with appropriate models of these devices and their interactions, giving a systematic way to handle the complexity of real situations.We present an approach, rigorous automated network security management, that front-loads formal modeling and analysis before problem solving, thereby providing easy-to-run tools with rigorously justified results. With this approach, we model the network and a class of practically important security goals. The models derived suggest algorithms that, given system configuration information, determine the security goals satisfied by the system. The modeling provides rigorous justification for the algorithms, which may then be implemented as ordinary computer programs requiring no formal methods training to operate.We have applied this approach to several problems. In this paper we describe two: distributed packet filtering and the use of IP security (IPsec) gateways. We also describe how to piece together the two separate solutions to these problems, jointly enforcing packet filtering as well as IPsec authentication and confidentiality on a single network.
Starting Page	29
Ending Page	48
Page Count	20
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	4
Issue Number	1-2
e-ISSN	16155270
Language	English
Publisher	Springer Berlin Heidelberg
Publisher Date	2005-02-01
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Network security Filtering routers IP security protocols Security management Formal methods Data Encryption Computer Communication Networks Operating Systems Coding and Information Theory Management of Computing and Information Systems Communications Engineering, Networks
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Offline firewall analysis

An overview of the verification of SET

Formal validation of automated policy refinement in the management of network security systems

Verifying multicast-based security protocols using the inductive method

A symbolic framework for multi-faceted security protocol analysis

OFMC: A symbolic model checker for security protocols

An adaptive threat model for security ceremonies

Game strategies in network security

Improving the ISO/IEC 11770 standard for key management techniques

Rigorous automated network security management

Similar Documents

Offline firewall analysis

An overview of the verification of SET

Formal validation of automated policy refinement in the management of network security systems

Verifying multicast-based security protocols using the inductive method

A symbolic framework for multi-faceted security protocol analysis

OFMC: A symbolic model checker for security protocols

An adaptive threat model for security ceremonies

Game strategies in network security

Improving the ISO/IEC 11770 standard for key management techniques

Rigorous automated network security management