Improving the configuration management of large network security systems

Authors:
João Porto de Albuquerque;Holger Isenberg;Heiko Krumm;Paulo Lício de Geus
Affiliations:
Institute of Computing, State University of Campinas, Campinas, SP, Brazil;FB Informatik, University of Dortmund, Dortmund, Germany;FB Informatik, University of Dortmund, Dortmund, Germany;Institute of Computing, State University of Campinas, Campinas, SP, Brazil
Venue:
DSOM'05 Proceedings of the 16th IFIP/IEEE Ambient Networks international conference on Distributed Systems: operations and Management
Year:
2005

Citing 7
Cited 1

Graphical fisheye views of graphs

CHI '92 Proceedings of the SIGCHI Conference on Human Factors in Computing Systems
Role-Based Access Control Models

Computer
Structure, Abstraction, and Direct Manipulation in Diagram Editors

DIAGRAMS '02 Proceedings of the Second International Conference on Diagrammatic Representation and Inference
Application of focus + context to UML

APVis '03 Proceedings of the Asia-Pacific symposium on Information visualisation - Volume 24
Firmato: A novel firewall management toolkit

ACM Transactions on Computer Systems (TOCS)
Policy Modeling and Refinement for Network Security Systems

POLICY '05 Proceedings of the Sixth IEEE International Workshop on Policies for Distributed Systems and Networks
On scalability and modularisation in the modelling of network security systems

ESORICS'05 Proceedings of the 10th European conference on Research in Computer Security

A service-oriented framework to promote interoperability among DRM systems

MMNS'06 Proceedings of the 9th IFIP/IEEE international conference on Management of Multimedia and Mobile Networks and Services

Quantified Score

Hi-index	0.00

Visualization

Abstract

The security mechanisms employed in today's networked environments are increasingly complex and their configuration management has an important role for the protection of these environments. Especially in large scale networks, security administrators are faced with the challenge of designing, deploying, maintaining, and monitoring a huge number of mechanisms, most of which have complicated and heterogeneous configuration syntaxes. This work offers an approach for improving the configuration management of network security systems in large-scale environments. We present a configuration process supported by a modelling technique that uniformly handles different mechanisms and by a graphical editor for the system design. The editor incorporates focus and context concepts for improving model visualisation and navigation.