{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,21]],"date-time":"2025-03-21T04:17:01Z","timestamp":1742530621585,"version":"3.40.1"},"publisher-location":"Berlin, Heidelberg","reference-count":30,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642252051"},{"type":"electronic","value":"9783642252068"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-25206-8_2","type":"book-chapter","created":{"date-parts":[[2012,2,17]],"date-time":"2012-02-17T14:28:07Z","timestamp":1329488887000},"page":"39-53","source":"Crossref","is-referenced-by-count":0,"title":["Static Analysis of Routing and Firewall Policy Configurations"],"prefix":"10.1007","author":[{"given":"Miroslav","family":"Sveda","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ondrej","family":"Rysavy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gayan","family":"de Silva","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Petr","family":"Matousek","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jaroslav","family":"Rab","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"2_CR1","unstructured":"Filtering routing updates on distance vector ip routing protocols. Cisco Systems, Document ID:9105 (September 2006)"},{"key":"2_CR2","doi-asserted-by":"crossref","unstructured":"Acharya, S., Wang, J., Ge, Z., Znati, T., Greenberg, A.: Simulation study of firewalls to aid improved performance. In: 39th Annual Simulation Symposium, 2006, p. 8 (2006)","DOI":"10.1109\/ANSS.2006.42"},{"key":"2_CR3","doi-asserted-by":"crossref","unstructured":"Burns, J., et al.: Automatic management of network security policy. In: DARPA Information Survivability Conference and Exposition, pp. 1012\u20131026 (2001)","DOI":"10.1109\/DISCEX.2001.932156"},{"key":"2_CR4","doi-asserted-by":"crossref","unstructured":"Bartal, Y., Mayer, A., Nissim, K., Wool, A.: Firmato: A Novel Firewall Management Toolkit. In: IEEE Symposium on Security and Privacy, pp. 17\u201331 (1999), citeseer.ist.psu.edu\/article\/bartal99firmato.html","DOI":"10.1109\/SECPRI.1999.766714"},{"key":"2_CR5","unstructured":"Benson, T., Akella, A.: Unraveling the complexity of network management. In: NSDI 2009: Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation (2009), http:\/\/portal.acm.org\/citation.cfm?id=1559000"},{"issue":"2","key":"2_CR6","first-page":"56","volume":"1","author":"P. Bera","year":"2009","unstructured":"Bera, P., Ghosh, S., Dasgupta, P.: Formal analysis of security policy implementations in enterprise networks. International Journal of Computer Networks and Communications\u00a01(2), 56\u201373 (2009)","journal-title":"International Journal of Computer Networks and Communications"},{"key":"2_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"117","DOI":"10.1007\/978-3-642-10772-6_10","volume-title":"Information Systems Security","author":"P. Bera","year":"2009","unstructured":"Bera, P., Ghosh, S., Dasgupta, P.: Formal Verification of Security Policy Implementations in Enterprise Networks. In: Prakash, A., Sen Gupta, I. (eds.) ICISS 2009. LNCS, vol.\u00a05905, pp. 117\u2013131. Springer, Heidelberg (2009)"},{"key":"2_CR8","unstructured":"Christiansen, M., Fleury, E.: An Interval Decision Diagram Based Firewall. In: 3rd International Conference on Networking (ICN 2004). IEEE (February 2004)"},{"key":"2_CR9","unstructured":"Clarke, E., Grumberg, O., Peled, D.: Model Checking. MIT Press (1999)"},{"key":"2_CR10","doi-asserted-by":"crossref","unstructured":"Gouda, M., Liu, A.X., Jafry, M.: Verification of distributed firewalls. In: Proceedings of the IEEE Global Communications Conference (GLOBECOM), New Oreleans, Louisiana (November 2008)","DOI":"10.1109\/GLOCOM.2008.ECP.388"},{"key":"2_CR11","doi-asserted-by":"crossref","unstructured":"Gross, L., Yellen, J. (eds.): Handbook of Graph Theory. CRC Press (2004)","DOI":"10.1201\/9780203490204"},{"key":"2_CR12","doi-asserted-by":"crossref","unstructured":"Guttman, J.D.: Filtering postures: Local enforcement for global policies. In: Proceedings of 1997 IEEE Symposium on Security and Privacy, pp. 120\u2013129. IEEE Computer Society Press (1997)","DOI":"10.1109\/SECPRI.1997.601327"},{"key":"2_CR13","doi-asserted-by":"crossref","unstructured":"Guttman, J.D.: Filtering postures: Local enforcement for global policies. In: IEEE Symposium on Security and Privacy, pp. 120\u2013129 (1997)","DOI":"10.1109\/SECPRI.1997.601327"},{"key":"2_CR14","doi-asserted-by":"crossref","unstructured":"Jeffrey, A., Samak, T.: Model checking firewall policy configurations. In: IEEE International Workshop on Policies for Distributed Systems and Networks, pp. 60\u201367 (2009)","DOI":"10.1109\/POLICY.2009.32"},{"key":"2_CR15","doi-asserted-by":"crossref","unstructured":"Le, F., Xie, G., Zhang, H.: Understanding route redistribution. In: IEEE International Conference on Network Protocols, ICNP 2007, pp. 81\u201392 (2007)","DOI":"10.1109\/ICNP.2007.4375839"},{"key":"2_CR16","doi-asserted-by":"crossref","unstructured":"Liu, A.X.: Formal verification of firewall policies. In: Proceedings of the 2008 IEEE International Conference on Communications (ICC), Beijing, China (May 2008)","DOI":"10.1109\/ICC.2008.289"},{"key":"2_CR17","unstructured":"Mitre: Common Vulnerabilities and Exposures Database, http:\/\/cve.mitre.org\/ (accessed on February 2008)"},{"key":"2_CR18","unstructured":"Pozo, S., Ceballos, R., Gasca, R.: Fast algorithms for consistency-based diagnosis of firewalls rule sets. In: Proceedings of the 3rd International Conference on Availability, Reliability and Security, ARES (2008)"},{"key":"2_CR19","doi-asserted-by":"crossref","unstructured":"Ritchey, R.W., Ammann, P.: Using model checking to analyze network vulnerabilities. In: IEEE Symposium on Security and Privacy, Washington, USA (2000)","DOI":"10.1109\/SECPRI.2000.848453"},{"key":"2_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1007\/11602897_22","volume-title":"Information and Communications Security","author":"H.R. Shahriari","year":"2005","unstructured":"Shahriari, H.R., Sadoddin, R., Jalili, R., Zakeri, R., Omidian, A.R.: Network Vulnerability Analysis through Vulnerability Take-Grant Model (VTG). In: Qing, S., Mao, W., L\u00f3pez, J., Wang, G. (eds.) ICICS 2005. LNCS, vol.\u00a03783, pp. 256\u2013268. Springer, Heidelberg (2005), citeseer.ist.psu.edu\/749214.html"},{"key":"2_CR21","doi-asserted-by":"crossref","unstructured":"de Silva, G., Sveda, M., Matousek, P., Rysavy, O.: Formal analysis approach on networks with dynamic behaviours. In: Proceeding of the 2nd International Workshop on Reliable Networks Design and Modeling (2010)","DOI":"10.1109\/ICUMT.2010.5676584"},{"key":"2_CR22","doi-asserted-by":"crossref","unstructured":"Sveda, M., Rysavy, O., Matousek, P., Rab, J., Cejka, R.: Security analysis of tcp\/ip networks \u2013 an approach to automatic analysis of network security properties. In: Proceedings of the International Conference on Data Communication Networking 2010, pp. 5\u201311. Institute for Systems and Technologies of Information, Control and Communication (2010)","DOI":"10.5220\/0002838300050011"},{"key":"2_CR23","unstructured":"Tidwell, T., Larson, R., Fitch, K., Hale, J.: Modeling Internet attacks. In: Proc. of the IEEE Workshop on Information Assurance and Security, West Point, NY (2001)"},{"key":"2_CR24","unstructured":"\u010cejka, R., Matou\u0161ek, P., R\u00e1b, J., Ry\u0161av\u00fd, O., \u0160v\u00e9da, M.: A formal approach to network security analysis. Tech. rep. (2008), http:\/\/www.fit.vutbr.cz\/research\/view_pub.php?id=8572"},{"key":"2_CR25","doi-asserted-by":"publisher","first-page":"62","DOI":"10.1109\/MC.2004.2","volume":"37","author":"A. Wool","year":"2004","unstructured":"Wool, A.: A quantitative study of firewall configuration errors. Computer\u00a037, 62\u201367 (2004)","journal-title":"Computer"},{"key":"2_CR26","doi-asserted-by":"crossref","unstructured":"Xie, G.G., Zhan, J., Maltz, D.A., Zhang, H., Greenberg, A., Hjalmtysson, G., Rexford, J.: On static reachability analysis of ip networks. In: Proc. IEEE INFOCOM (2005)","DOI":"10.1109\/INFCOM.2005.1498492"},{"key":"2_CR27","doi-asserted-by":"crossref","unstructured":"Xie, G., Zhan, J., Maltz, D., Zhang, H., Greenberg, A., Hjalmtysson, G., Rexford, J.: On static reachability analysis of ip networks. In: INFOCOM, pp. 2170\u20132183 (2005)","DOI":"10.1109\/INFCOM.2005.1498492"},{"key":"2_CR28","unstructured":"Ou, X., Govindavajhala, S., Appel, A.W.: MulVAL: A logic-based network security analyzer. In: Proc. of the 14th USENIX Security Symposium, Baltimore (2005), citeseer.ist.psu.edu\/article\/bartal99firmato.html"},{"key":"2_CR29","unstructured":"Yuan, L., Chen, H.: Fireman: a toolkit for firewall modeling and analysis. In: Proceedings of IEEE Symposium on Security and Privacy, pp. 199\u2013213 (2006)"},{"key":"2_CR30","unstructured":"Zakeri, R., Shahriari, H., Jalili, R., Sadoddin, R.: Modeling TCP\/IP Networks Topology for Network Vulnerability Analysis. In: 2nd Int. Symposium of Telecommunications, pp. 653\u2013658 (2005), citeseer.ist.psu.edu\/749214.html"}],"container-title":["Communications in Computer and Information Science","e-Business and Telecommunications"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-25206-8_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,21]],"date-time":"2025-03-21T01:56:32Z","timestamp":1742522192000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-25206-8_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642252051","9783642252068"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-25206-8_2","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2012]]}}}