| Presentation | 2006-07-20 A Method of Correction Plan Generation in the Security Configuration Analyzing System Sumitaka OKAJO, Katsushi MATSUDA, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | In order to protect networks against network security threats, many security components with various security functions have been deployed. The configuration and management of those components are highly complex. Therefore, we have developed a security configuration analyzing system which can find security policy conflicts among the configurations of cooperated devices. This paper especially describes a method of correction plan generation for configuration mismatch resolution. The paper also presents a prototype system which can resolve mismatches between firewall and IDS policies. This system automatically finds the mismatches and generates the plans. The system can reduce administrator's load and cost. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Security / Policy / Analysis / Firewall / IDS |
| Paper # | ISEC2006-36,SITE2006-33 |
| Date of Issue |
| Conference Information | |
| Committee | SITE |
|---|---|
| Conference Date | 2006/7/13(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | |
| Chair | |
| Vice Chair | |
| Secretary | |
| Assistant | |
| Paper Information | |
| Registration To | Social Implications of Technology and Information Ethics (SITE) |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | A Method of Correction Plan Generation in the Security Configuration Analyzing System |
| Sub Title (in English) | |
| Keyword(1) | Security |
| Keyword(2) | Policy |
| Keyword(3) | Analysis |
| Keyword(4) | Firewall |
| Keyword(5) | IDS |
| 1st Author's Name | Sumitaka OKAJO |
| 1st Author's Affiliation | Internet Systems Research Laboratories. NEC Corp.() |
| 2nd Author's Name | Katsushi MATSUDA |
| 2nd Author's Affiliation | Internet Systems Research Laboratories. NEC Corp. |
| Date | 2006-07-20 |
| Paper # | ISEC2006-36,SITE2006-33 |
| Volume (vol) | vol.106 |
| Number (no) | 174 |
| Page | pp.pp.- |
| #Pages | 8 |
| Date of Issue | |