@inproceedings{27b04bbf558e4dcba8b7e1cf375840c1,
title = "Towards filtering and alerting rule rewriting on single-component policies",
abstract = "The use of firewalls and network intrusion detection systems (NIDSs) is the dominant method to survey and guarantee the security policy in current corporate networks. On the one hand, firewalls are traditional security components which provide means to filter traffic within corporate networks, as well as to police the incoming and outcoming interaction with the Internet, On the other hand, NIDSs are complementary security components used to enhance the visibility level of the network, pointing to malicious or anomalous traffic. To properly configure both firewalls and NIDSs, it is necessary the use of a set of configuration rules, i.e., a set of filtering or alerting rules. Nevertheless, the existence of anomalies within the set of configuration rules of both firewalls and NIDSs is very likely to degrade the network security policy. The discovering and removal of these anomalies is a serious and complex problem to solve. In this paper, we present a set of mechanisms for such a management.",
keywords = "Firewalls, NIDSs, Network security, Policy anomalies",
author = "Joaqu{\'i}n Garc{\'i}a-Alfaro and Fr{\'e}d{\'e}ric Cuppens and Nora Cuppens-Boulahia",
year = "2006",
month = jan,
day = "1",
doi = "10.1007/11875567\_14",
language = "English",
isbn = "3540457623",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "182--194",
booktitle = "Computer Safety, Reliability, and Security - 25th International Conference, SAFECOMP 2006. Proceedings",
note = "25th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2006 ; Conference date: 27-09-2006 Through 29-09-2006",
}