{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T12:47:42Z","timestamp":1742993262346,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":26,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540273240"},{"type":"electronic","value":"9783540315841"}],"license":[{"start":{"date-parts":[[2005,1,1]],"date-time":"2005-01-01T00:00:00Z","timestamp":1104537600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2005]]},"DOI":"10.1007\/11516798_15","type":"book-chapter","created":{"date-parts":[[2010,7,14]],"date-time":"2010-07-14T04:29:05Z","timestamp":1279081745000},"page":"197-212","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["Firewall Queries"],"prefix":"10.1007","author":[{"given":"Alex X.","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohamed G.","family":"Gouda","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Huibo H.","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anne HH.","family":"Ngu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2005,8,23]]},"reference":[{"key":"15_CR1","unstructured":"Al-Shaer, E., Hamed, H.: Discovery of policy anomalies in distributed firewalls. In: IEEE INFOCOM (March 2004)"},{"key":"15_CR2","unstructured":"Baboescu, F., Singh, S., Varghese, G.: Packet classification for core routers: Is there an alternative to cams? In: Proc. of IEEE INFOCOM (2003)"},{"key":"15_CR3","unstructured":"Baboescu, F., Varghese, G.: Fast and scalable conflict detection for packet classifiers. In: Proc. of the 10th IEEE International Conference on Network Protocols (2002)"},{"key":"15_CR4","unstructured":"Bartal, Y., Mayer, A.J., Nissim, K., Wool, A.: Firmato: A novel firewall management toolkit. Technical Report EES2003-1, Dept. of Electrical Engineering Systems, Tel Aviv University (2003)"},{"key":"15_CR5","unstructured":"CERT. Test the firewall system, http:\/\/www.cert.org\/security-improvement\/practices\/p060.html"},{"key":"15_CR6","unstructured":"CERT Coordination Center, http:\/\/www.cert.org\/advisories\/ca-2003-20.html"},{"key":"15_CR7","unstructured":"Moore, D., et al.: http:\/\/www.caida.org\/outreach\/papers\/2003\/sapphire\/sapphire.html"},{"key":"15_CR8","unstructured":"Eppstein, D., Muthukrishnan, S.: Internet packet filter management and rectangle geometry. In: Symp. on Discrete Algorithms, pp. 827\u2013835 (2001)"},{"key":"15_CR9","unstructured":"Eronen, P., Zitting, J.: An expert system for analyzing firewall rules. In: Proc. of the 6th Nordic Workshop on Secure IT Systems (NordSec 2001), pp. 100\u2013107 (2001)"},{"key":"15_CR10","unstructured":"Farmer, D., Venema, W.: Improving the security of your site by breaking into it (1993), http:\/\/www.alw.nih.gov\/Security\/Docs\/admin-guide-to-cracking.101.html"},{"issue":"3","key":"15_CR11","doi-asserted-by":"publisher","first-page":"263","DOI":"10.1016\/S0167-4048(01)00314-5","volume":"20","author":"M. Frantzen","year":"2001","unstructured":"Frantzen, M., Kerschbaum, F., Schultz, E., Fahmy, S.: A framework for understanding vulnerabilities in firewalls using a dataflow model of firewall internals. Computers and Security\u00a020(3), 263\u2013270 (2001)","journal-title":"Computers and Security"},{"key":"15_CR12","volume-title":"Protecting Networks with SATAN","author":"M. Freiss","year":"1998","unstructured":"Freiss, M.: Protecting Networks with SATAN. O\u2019Reilly & Associates, Inc., Sebastopol (1998)"},{"key":"15_CR13","doi-asserted-by":"crossref","unstructured":"Gouda, M.G., Liu, A.X.: Firewall design: consistency, completeness and compactness. In: Proc. of the 24th IEEE International Conference on Distributed Computing Systems (ICDCS 2004), pp. 320\u2013327 (2004)","DOI":"10.1109\/ICDCS.2004.1281597"},{"key":"15_CR14","unstructured":"Gupta, P.: Algorithms for Routing Lookups and Packet Classification. PhD thesis, Stanford University (2000)"},{"issue":"2","key":"15_CR15","doi-asserted-by":"publisher","first-page":"24","DOI":"10.1109\/65.912717","volume":"15","author":"P. Gupta","year":"2001","unstructured":"Gupta, P., McKeown, N.: Algorithms for packet classification. IEEE Network\u00a015(2), 24\u201332 (2001)","journal-title":"IEEE Network"},{"key":"15_CR16","doi-asserted-by":"crossref","unstructured":"Guttman, J.D.: Filtering postures: Local enforcement for global policies. In: Proc. of IEEE Symp. on Security and Privacy, pp. 120\u2013129 (1997)","DOI":"10.1109\/SECPRI.1997.601327"},{"key":"15_CR17","doi-asserted-by":"crossref","unstructured":"Hari, A., Suri, S., Parulkar, G.M.: Detecting and resolving packet filter conflicts. In: Proc. of IEEE INFOCOM, pp. 1203\u20131212 (2000)","DOI":"10.1109\/INFCOM.2000.832496"},{"key":"15_CR18","doi-asserted-by":"crossref","unstructured":"Hazelhurst, S., Attar, A., Sinnappan, R.: Algorithms for improving the dependability of firewall and filter rule lists. In: Proc. of the International Conference on Dependable Systems and Networks (DSN 2000), pp. 576\u2013585 (2000)","DOI":"10.1109\/ICDSN.2000.857593"},{"issue":"3","key":"15_CR19","doi-asserted-by":"publisher","first-page":"214","DOI":"10.1016\/S0167-4048(03)00310-9","volume":"22","author":"S. Kamara","year":"2003","unstructured":"Kamara, S., Fahmy, S., Schultz, E., Kerschbaum, F., Frantzen, M.: Analysis of vulnerabilities in internet firewalls. Computers and Security\u00a022(3), 214\u2013232 (2003)","journal-title":"Computers and Security"},{"key":"15_CR20","doi-asserted-by":"crossref","unstructured":"Liu, A.X., Gouda, M.G.: Diverse firewall design. In: Proc. of the International Conference on Dependable Systems and Networks (DSN 2004), pp. 595\u2013604 (June 2004)","DOI":"10.1109\/DSN.2004.1311930"},{"key":"15_CR21","doi-asserted-by":"crossref","unstructured":"Mayer, A., Wool, A., Ziskind, E.: Fang: A firewall analysis engine. In: Proc. of IEEE Symp. on Security and Privacy, pp. 177\u2013187 (2000)","DOI":"10.1109\/SECPRI.2000.848455"},{"issue":"1","key":"15_CR22","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1080\/10919399409540214","volume":"4","author":"J.D. Moffett","year":"1994","unstructured":"Moffett, J.D., Sloman, M.S.: Policy conflict analysis in distributed system management. Journal of Organizational Computing\u00a04(1), 1\u201322 (1994)","journal-title":"Journal of Organizational Computing"},{"key":"15_CR23","unstructured":"Nessus (March 2004), http:\/\/www.nessus.org\/"},{"key":"15_CR24","volume-title":"Web Security Sourcebook","author":"A.D. Rubin","year":"1997","unstructured":"Rubin, A.D., Geer, D., Ranum, M.J.: Web Security Sourcebook, 1st edn. Wiley Computer Publishing, Chichester (1997)","edition":"1"},{"key":"15_CR25","unstructured":"Wool, A.: Architecting the lumeta firewall analyzer. In: Proc. of the 10th USENIX Security Symposium, pp. 85\u201397 (August 2001)"},{"issue":"6","key":"15_CR26","doi-asserted-by":"publisher","first-page":"62","DOI":"10.1109\/MC.2004.2","volume":"37","author":"A. Wool","year":"2004","unstructured":"Wool, A.: A quantitative study of firewall configuration errors. IEEE Computer\u00a037(6), 62\u201367 (2004)","journal-title":"IEEE Computer"}],"container-title":["Lecture Notes in Computer Science","Principles of Distributed Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/11516798_15","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,22]],"date-time":"2025-02-22T22:08:00Z","timestamp":1740262080000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/11516798_15"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005]]},"ISBN":["9783540273240","9783540315841"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/11516798_15","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2005]]},"assertion":[{"value":"23 August 2005","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}