Mis-Configurations in Network Security Access Controls

Alicea, Michael; Alsmadi, Izzat

doi:10.2139/ssrn.3808732

Search citation statements

Order By: Relevance

Paper Sections

Select...

Challenges and Research Trends 41 Stateless Vs Stateful1

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2021

Publication Types

Select...

Article1

Relationship

Self Cite1

Independent0

Authors

Journals

Cited by 1 publication

(1 citation statement)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Surprisingly, there is still work being done in the area of firewall misconfiguration and correction on stateless firewalls. Just to list a few, References [5,7,12,40,56,63] all discuss detection of misconfigurations on stateless firewalls. Despite firewalls advancing to be more complex than in the days of simple filtering, the research done into stateless firewalls has not stopped.…”

Section: Challenges and Research Trends 41 Stateless Vs Statefulmentioning

confidence: 99%

Misconfiguration in Firewalls and Network Access Controls: Literature Review

Alicea

Alsmadi

2021

Future Internet

Self Cite

View full text Add to dashboard Cite

Firewalls and network access controls play important roles in security control and protection. Those firewalls may create an incorrect sense or state of protection if they are improperly configured. One of the major configuration problems in firewalls is related to misconfiguration in the access control roles added to the firewall that will control network traffic. In this paper, we evaluated recent research trends and open challenges related to firewalls and access controls in general and misconfiguration problems in particular. With the recent advances in next-generation (NG) firewalls, firewall roles can be auto-generated based on networks and threats. Nonetheless, and due to the large number of roles in any medium to large networks, roles’ misconfiguration may occur for several reasons and will impact the performance of the firewall and overall network and protection efficiency.

show abstract