A Development of Central Policy Database for managing Heterogeneous Firewall Systems 


Vol. 9,  No. 6, pp. 1063-1070, Dec.  2002
10.3745/KIPSTD.2002.9.6.1063


PDF
  Abstract

With a remarkable growth and expansion of Internet, the security issues emerged from intrusions and attacks such as computer viruses, denial of services and hackings to destroy information have been considered as serious threats for Internet and the private networks. To protect networks from intrusions and attacks, many vendors have developed various security systems such as firewalls and intrusion detection systems. However, managing these systems individually demands too much work and high cost. Thus, integrated and autonomous security management for various security products has become more important. In this paper, we present the architecture of the WISMSF (Web-based Integrated Security Management System for Firewalls) and the merits of centralized approach for managing heterogeneous firewalls and implement the prototype of the central policy database that is a component of the WISMSF engine. The WISMSF engine supports an integrated view for policies, the integrity of policies and the easy recovery and addition of policies. And also, we define the policy conflicts of WISMSF and present the policy recovery process to support to the policies consistence.

  Statistics


  Cite this article

[IEEE Style]

D. Y. Lee and T. M. Chung, "A Development of Central Policy Database for managing Heterogeneous Firewall Systems," The KIPS Transactions:PartD, vol. 9, no. 6, pp. 1063-1070, 2002. DOI: 10.3745/KIPSTD.2002.9.6.1063.

[ACM Style]

Dong Young Lee and Tai Myoung Chung. 2002. A Development of Central Policy Database for managing Heterogeneous Firewall Systems. The KIPS Transactions:PartD, 9, 6, (2002), 1063-1070. DOI: 10.3745/KIPSTD.2002.9.6.1063.