Configuration management and security

Authors:
Steven M. Bellovin;Randy Bush
Affiliations:
Department of Computer Science, Columbia University, New York, NY;Internet Initiative of Japan, Tokyo, JP
Venue:
IEEE Journal on Selected Areas in Communications - Special issue on network infrastructure configuration
Year:
2009

Citing 14
Cited 1

The design and implementation of tripwire: a file system integrity checker

CCS '94 Proceedings of the 2nd ACM Conference on Computer and communications security
Security problems in the TCP/IP protocol suite

ACM SIGCOMM Computer Communication Review
An Abductive Approach for Analysing Event-Based Requirements Specifications

ICLP '02 Proceedings of the 18th International Conference on Logic Programming
Using Event Calculus to Formalise Policy Specification and Analysis

POLICY '03 Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks
Blocking Java Applets at the Firewall

SNDSS '97 Proceedings of the 1997 Symposium on Network and Distributed System Security
Fang: A Firewall Analysis Engine

SP '00 Proceedings of the 2000 IEEE Symposium on Security and Privacy
A Quantitative Study of Firewall Configuration Errors

Computer
Timing the Application of Security Patches for Optimal Uptime

LISA '02 Proceedings of the 16th USENIX conference on System administration
Offline firewall analysis

International Journal of Information Security
Writing, supporting, and evaluating tripwire: a publically available security tool

UNIX'94 Proceedings of the USENIX Applications Development Symposium Proceedings on USENIX Applications Development Symposium Proceedings
Mapping and visualizing the internet

ATEC '00 Proceedings of the annual conference on USENIX Annual Technical Conference
Declarative Infrastructure Configuration Synthesis and Debugging

Journal of Network and Systems Management
Towards systematic design of enterprise networks

CoNEXT '08 Proceedings of the 2008 ACM CoNEXT Conference
Traffic engineering with traditional IP routing protocols

IEEE Communications Magazine

An automated system for emulated network experimentation

Proceedings of the ninth ACM conference on Emerging networking experiments and technologies

Quantified Score

Hi-index	0.00

Visualization

Abstract

Proper configuration management is vital for host and network security. We outline the problems, especially for large-scale environments, and discuss the security aspects of a number of different configuration scenarios, including security appliances (e.g., firewalls), desktop and server computers, and PDAs. We conclude by discussing research challenges.