A security scheme for protecting security policies in firewall

ABSTRACT

This paper discusses the problem of protecting security policies and other related information in security mechanisms, such as the filtering policy of a firewall in distributed or ubiquitous environment. Unauthorized disclosure of such information might reveal the fundamental principles and methods for the protection of the whole network. We discuss the problem with typical protecting method using hash functions and we propose a scheme that protects the rule in firewall using cryptographic algorithm.

REFERENCES

• 1: Hakan Kvarnstrom, Hans Hedbom, Erland Jonsson, "Protecting Security Policies in Ubiquitous Environments Using One-way Functions", First International Conference on Security in Pervasive Computing, SPC 2003. Boppard, Germany. 2003
• 2: "Firewall FAQ", certcc-kr-tr-96-002 (<u>http://www.certcc.or.kr</u>). KISA
• 3: P. G. Neumann. "Architectures and formal representations for secure systems", Final Report; SRI Project 6401; Deliverable A002, 1995
• 4: H. Hedbom, S. Lindskog, E. Jonsson. "Risk and Dangers of Security Extensions" In Proceedings of IFIP Working Conference on Security and Control of IT in Society-II, SCITS-II, Bratislava, Slovakia, June 15--16, 2001.
• 5: S. Goddard , Roger M. Kieckhafer , Y. Zhang, An Unavailability Analysis of Firewall Sandwich Configurations, The 6th IEEE International Symposium on High-Assurance Systems Engineering: Special Topic: Impact of Networking, p.139-148, October 24-26, 2001
• 6: Barbara Guttman, Robert Gabwill. "Implementing Internet firwall security policy", NIST Specail Publication. April 13, 1998.(http://www.nist.gov)
• 7: William Stallings, Cryptography and network security (2nd ed.): principles and practice, Prentice-Hall, Inc., Upper Saddle River, NJ, 1998
• 8: Douglas Stinson, Cryptography: Theory and Practice,Second Edition, CRC/C&H, 2002

INDEX TERMS

Keywords:
cryptographic algorithm, firewall, security policy, ubiquitous environment