{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,26]],"date-time":"2025-06-26T03:40:03Z","timestamp":1750909203609,"version":"3.41.0"},"publisher-location":"Cham","reference-count":20,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319686899"},{"type":"electronic","value":"9783319686905"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-68690-5_27","type":"book-chapter","created":{"date-parts":[[2017,10,10]],"date-time":"2017-10-10T01:14:51Z","timestamp":1507598091000},"page":"447-463","source":"Crossref","is-referenced-by-count":2,"title":["Inconsistency Analysis of Time-Based Security Policy and Firewall Policy"],"prefix":"10.1007","author":[{"given":"Yi","family":"Yin","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuichiro","family":"Tateiwa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yun","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yoshiaki","family":"Katayama","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Naohisa","family":"Takahashi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,10,11]]},"reference":[{"key":"27_CR1","unstructured":"Cisco PIX Firewall Release Notes. https:\/\/www.cisco.com\/en\/US\/docs\/security\/pix\/pix63\/release\/notes\/pixrn634.html"},{"key":"27_CR2","unstructured":"Linux man page. http:\/\/linux.die.net\/man\/8\/iptables"},{"key":"27_CR3","doi-asserted-by":"crossref","unstructured":"Yin, Y., Xu, X., Katayama, Y., Takahashi, N.: Inconsistency detection system for security policy and rewall policy. In: 2010 First International Conference on Networking and Computing, pp. 294\u2013297. IEEE (2011)","DOI":"10.1109\/IC-NC.2010.45"},{"key":"27_CR4","series-title":"Lecture Notes in Electrical Engineering","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1007\/978-3-642-27326-1_18","volume-title":"Future Wireless Networks and Information Systems","author":"Y Yin","year":"2012","unstructured":"Yin, Y., Xu, J., Takahashi, N.: Verifying consistency between security policy and firewall policy by using a constraint satisfaction problem server. In: Zhang, Y. (ed.) Future Wireless Networks and Information Systems. LNEE, vol. 144, pp. 135\u2013145. Springer, Heidelberg (2012). doi: 10.1007\/978-3-642-27326-1_18"},{"key":"27_CR5","unstructured":"Sugar: a SAT-based Constraint Solver. http:\/\/bach.istc.kobe-u.ac.jp\/sugar\/"},{"issue":"4","key":"27_CR6","doi-asserted-by":"crossref","first-page":"24","DOI":"10.4156\/jnit.vol2.issue4.3","volume":"2","author":"S Thanasegaran","year":"2011","unstructured":"Thanasegaran, S., Tateiwa, Y., Katayama, Y., Takahashi, N.: Design and implementation of conflict detection system for time-based firewall policies. J. Next Gener. Inf. Technol. 2(4), 24\u201339 (2011)","journal-title":"J. Next Gener. Inf. Technol."},{"key":"27_CR7","unstructured":"Z3 Theorem Prover. https:\/\/github.com\/Z3Prover\/z3\/wiki"},{"key":"27_CR8","doi-asserted-by":"crossref","unstructured":"Moura, L.D., Bj\u00f8rner, N.: Z3: an efficient SMT solver. In: Proceedings of the Theory and practice of software, 14th International Conference on Tools and Algorithms for the Construction and Analysis of Systems, pp. 337\u2013340 (2008)","DOI":"10.1007\/978-3-540-78800-3_24"},{"key":"27_CR9","unstructured":"Z3 C API. https:\/\/z3prover.github.io\/api\/html\/group__capi.html"},{"issue":"4","key":"27_CR10","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1109\/MIC.2010.29","volume":"14","author":"A Wool","year":"2010","unstructured":"Wool, A.: Trends in firewall configuration errors: measuring the holes in swiss cheese. IEEE Internet Comput. 14(4), 58\u201365 (2010)","journal-title":"IEEE Internet Comput."},{"key":"27_CR11","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-10371-6","volume-title":"Automated Firewall Analytics Design, Configuration and Optimization","author":"E Al-Shaer","year":"2014","unstructured":"Al-Shaer, E.: Automated Firewall Analytics Design, Configuration and Optimization. Springer, Heidelberg (2014)"},{"issue":"3","key":"27_CR12","doi-asserted-by":"crossref","first-page":"318","DOI":"10.1109\/TDSC.2012.20","volume":"9","author":"H Hu","year":"2012","unstructured":"Hu, H., Ahn, G., Kulkarni, K.: Detecting and resolving firewall policy anomalies. IEEE Trans. Secure Comput. 9(3), 318\u2013331 (2012)","journal-title":"IEEE Trans. Secure Comput."},{"key":"27_CR13","doi-asserted-by":"crossref","unstructured":"Jeffrey, A., Samak, T.: Model checking firewall policy configurations. In: IEEE International Symposium on Policies for Distributed Systems and Networks, pp. 60\u201367 (2009)","DOI":"10.1109\/POLICY.2009.32"},{"key":"27_CR14","doi-asserted-by":"crossref","unstructured":"Bouhoula, A., Yazidi, A.: A security policy query engine for fully automated resolution of anomalies in firewall configurations. In: IEEE 15th International Symposium on Network Computing and Applications, pp. 76\u201380 (2016)","DOI":"10.1109\/NCA.2016.7778596"},{"key":"27_CR15","doi-asserted-by":"crossref","unstructured":"Matsumoto, S., Bouhoula, A.: Automatic verification of firewall configuration with respect to security policy requirements. In: Proceedings of the International Workshop on Computational Intelligence in Security for Information Systems, pp. 123\u2013130 (2008)","DOI":"10.1007\/978-3-540-88181-0_16"},{"key":"27_CR16","doi-asserted-by":"crossref","unstructured":"Youssef, N.B., Bouhoula, A., Jacquemard, F.: Automatic verification of conformance of firewall configurations to security policies. In: IEEE Symposium on Computers and Communications, pp. 526\u2013531 (2009)","DOI":"10.1109\/ISCC.2009.5202309"},{"key":"27_CR17","unstructured":"Dutertre, B., Moura, L.D.: The YICES SMT solver. http:\/\/gauss.ececs.uc.edu\/Courses\/c626\/lectures\/SMT\/tool-paper.pdf"},{"key":"27_CR18","doi-asserted-by":"crossref","unstructured":"Ranathunga, D., Roughan, M., Kernick, P., Falkner, N.: Malachite: firewall policy comparison. In: IEEE Symposium on Computers and Communication, pp. 310\u2013317 (2016)","DOI":"10.1109\/ISCC.2016.7543759"},{"key":"27_CR19","doi-asserted-by":"crossref","unstructured":"Cupens, F., Cuppens-Boulahia, N., Sans, T., Miege, A.: A formal approach to specify and deploy a network security policy. In: Second Workshop on Formal Aspects in Security and Trust, pp. 203\u2013218 (2004)","DOI":"10.1007\/0-387-24098-5_15"},{"issue":"4","key":"27_CR20","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1145\/1035582.1035583","volume":"22","author":"Y Bartal","year":"2004","unstructured":"Bartal, Y., Mayer, A.J., Nissim, K., Wool, A.: Firmato: a novel firewall management toolkit. ACM Trans. Comput. Syst. 22(4), 381\u2013420 (2004)","journal-title":"ACM Trans. Comput. Syst."}],"container-title":["Lecture Notes in Computer Science","Formal Methods and Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-68690-5_27","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,26]],"date-time":"2025-06-26T03:06:12Z","timestamp":1750907172000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-68690-5_27"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319686899","9783319686905"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-68690-5_27","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2017]]}}}