| De, S., G.: Network-wide Security Analysis, Brno, CZ, 2012, s. 163 | | Jazyk publikace: | angličtina |
|---|
| Název publikace: | Network-wide Security Analysis |
|---|
| Název (cs): | Analýza bezpečnosti sítě |
|---|
| Strany: | 163 |
|---|
| Místo vydání: | Brno, CZ |
|---|
| Rok: | 2012 |
|---|
| Soubory: | |
|---|
|
| | Klíčová slova |
|---|
| network security, static analysis, end-to-end reachability, IP networks, routing, state space exploration |
| Anotace |
|---|
| The objective of the research is to model and analyze the effects of dynamic routing protocols. The thesis addresses the analysis of service reachability, configurations, routing and security filters on dynamic networks in the event of device or link failures.
The research contains two main sections, namely, modeling and analysis. First section consists of modeling of network topology, protocol behaviors, device configurations and filters. In the modeling, graph algorithms, routing redistribution theory, relational algebra and temporal logics were used. For the analysis of reachability, a modified topology table was introduced. This is a unique centralized table for a given network and invariant for network states. For the analysis of configurations, a constraint-based analysis was developed by using XSD Prolog. Routing and redistribution were analyzed by using routing information bases and for analyzing the filtering rules, a SAT-based decision procedure was incorporated. A part of the analysis was integrated to a simulation tool at OMNeT++ environment.
There are several innovations introduced in this thesis. Filtering network graph, modi- fied topology table, general state to reduce the state space, modeling devices as filtering nodes and constraint-based analysis are the key innovations. Abstract network graph, forwarding device model and redistribution with routing information are extensions of the existing research. Finally, it can be concluded that this thesis discusses novel approaches, modeling methods and analysis techniques in the area of dynamic networks. Integration of these methods into a simulation tool will be a very demanding product for the network designers and the administrators. |
| BibTeX: |
|---|
@PHDTHESIS{
author = {Gayan Silva De},
title = {Network-wide Security Analysis},
pages = {163},
year = {2012},
location = {Brno, CZ},
language = {english},
url = {http://www.fit.vutbr.cz/research/view_pub.php?id=9946}
} |
|
Fakulta informačních technologií