TY - JOUR
T1 - Trends in firewall configuration errors
T2 - Measuring the holes in Swiss cheese
AU - Wool, Avishai
PY - 2010/7
Y1 - 2010/7
N2 - The first quantitative evaluation of the quality of corporate firewall configurations appeared in 2004, based on Check Point Firewall-1 rule sets. In general, that survey indicated that corporate firewalls often enforced poorly written rule sets. This article revisits the first survey. In addition to being larger, the current study includes configurations from two major vendors. It also introduces a firewall complexity. The study's findings validate the 2004 study's main observations: firewalls are (still) poorly configured, and a rule-set's complexity is (still) positively correlated with the number of detected configuration errors. However, unlike the 2004 study, the current study doesn't suggest that later software versions have fewer errors.
AB - The first quantitative evaluation of the quality of corporate firewall configurations appeared in 2004, based on Check Point Firewall-1 rule sets. In general, that survey indicated that corporate firewalls often enforced poorly written rule sets. This article revisits the first survey. In addition to being larger, the current study includes configurations from two major vendors. It also introduces a firewall complexity. The study's findings validate the 2004 study's main observations: firewalls are (still) poorly configured, and a rule-set's complexity is (still) positively correlated with the number of detected configuration errors. However, unlike the 2004 study, the current study doesn't suggest that later software versions have fewer errors.
KW - firewalls
KW - network security
KW - risk sets
UR - http://www.scopus.com/inward/record.url?scp=77954346656&partnerID=8YFLogxK
U2 - 10.1109/MIC.2010.29
DO - 10.1109/MIC.2010.29
M3 - ???researchoutput.researchoutputtypes.contributiontojournal.systematicreview???
AN - SCOPUS:77954346656
SN - 1089-7801
VL - 14
SP - 58
EP - 65
JO - IEEE Internet Computing
JF - IEEE Internet Computing
IS - 4
M1 - 5440153
ER -