Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344)最新文献_第3页

A user-centered, modular authorization service built on an RBAC foundation 以用户为中心的模块化授权服务，构建在RBAC基础上

Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344) Pub Date : 1999-05-09 DOI: 10.1109/SECPRI.1999.766718

M. Zurko, Richard T. Simon, T. Sanfilippo

引用次数: 103

20 years of covert channel modeling and analysis 20年的隐蔽通道建模和分析

Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344) Pub Date : 1999-05-09 DOI: 10.1109/SECPRI.1999.766906

J. Millen

引用次数: 131

Firmato: a novel firewall management toolkit Firmato:一个新的防火墙管理工具包

Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344) Pub Date : 1999-05-09 DOI: 10.1109/SECPRI.1999.766714

Y. Bartal, Alain J. Mayer, Kobbi Nissim, A. Wool

{"title":"Firmato: a novel firewall management toolkit","authors":"Y. Bartal, Alain J. Mayer, Kobbi Nissim, A. Wool","doi":"10.1109/SECPRI.1999.766714","DOIUrl":"https://doi.org/10.1109/SECPRI.1999.766714","url":null,"abstract":"In recent years, packet filtering firewalls have seen some impressive technological advances (e.g., stateful inspection, transparency, performance, etc.) and widespread deployment. In contrast, firewall and security management technology is lacking. We present Firmato, a firewall management toolkit, with the following distinguishing properties and components: (1) an entity relationship model containing, in a unified form, global knowledge of the security policy and of the network topology; (2) a model definition language, which we use as an interface to define an instance of the entity relationship model; (3) a model compiler translating the global knowledge of the model into firewall-specific configuration files; and (4) a graphical firewall rule illustrator. We demonstrate Firmato's capabilities on a realistic example, thus showing that firewall management can be done successfully at an appropriate level of abstraction. We implemented our toolkit to work with a commercially available firewall product. We believe that our approach is an important step towards streamlining the process of configuring and managing firewalls, especially in complex, multi firewall installations.","PeriodicalId":204019,"journal":{"name":"Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344)","volume":"57 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1999-05-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114984656","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 414

Local reconfiguration policies 本地重构策略

Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344) Pub Date : 1999-05-09 DOI: 10.1109/SECPRI.1999.766717

J. Millen

引用次数: 17

A multi-threading architecture for multilevel secure transaction processing 用于多级安全事务处理的多线程体系结构

Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344) Pub Date : 1999-05-01 DOI: 10.1109/SECPRI.1999.766912

Haruna R. Isa, W. Shockley, C. Irvine

引用次数: 4

Detecting intrusions using system calls: alternative data models 使用系统调用检测入侵:替代数据模型

Proceedings of the 1999 IEEE Symposium on Security and Privacy (Cat. No.99CB36344) Pub Date : 1900-01-01 DOI: 10.1109/SECPRI.1999.766910

C. Warrender, S. Forrest, Barak A. Pearlmutter

引用次数: 1264