閱讀全文 | |
篇名 |
A Bit Vector-Based Diagnosis Mechanism for Firewall Rule Anomalies in IPv6 Networking Environment
|
---|---|
並列篇名 | A Bit Vector-Based Diagnosis Mechanism for Firewall Rule Anomalies in IPv6 Networking Environment |
作者 | Chi-Shih Chao、Stephen J. H. Yang |
英文摘要 | Firewalls are what some consider to be the most essential devices which can safeguard networks. Misconfigurations of firewall rules often lead to rule anomalies which can be easily used by network attacks to paralyze the managed network. However, finding such rule anomalies is no easy task due to its time-consuming, laboring, strenuous characteristics. What’s worse is, with the massive and increasing deployment of IPv6 in the current Internet, anomaly diagnosis for firewall rules becomes even harder. In this paper, a bit vector-based anomaly diagnosis approach is proposed and realized where it can pinpoint anomalies among IPv6 firewall rules not only effectively, but also much more efficiently and more easily. As a result, a visualized platform for our IPv6 firewall rule anomaly diagnosis has been implemented and comprehensive performance evaluations on anomaly diagnosis have been conducted also, in which our developed approach shows its excellence and feasibility. |
起訖頁 | 867-876 |
關鍵詞 | Rule anomalies in IPv6 firewalls、BST-based vectorization、Rule anomaly diagnosis、Diagnosis visualization and system usability |
刊名 | 網際網路技術學刊 |
期數 | 202107 (22:4期) |
出版單位 | 台灣學術網路管理委員會 |
DOI |
|
QR Code | |
該期刊 上一篇
| On the Distributed Trigger Counting Problem for Dynamic Networks |
該期刊 下一篇
| Novel Data Fusion Scheme of WBAN for Medical Monitoring |