Information game of public firewall rules

Qi Liao, Zhen Li, Aaron Striegel

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Scopus citations

Abstract

Firewalls are among the most important components in network security. Traditionally, the rules of the firewall are kept private under the assumption that privacy of the ruleset makes attacks on the network more difficult. We posit that this assumption is no longer valid in the Internet of today due to two factors: the emergence of botnets reducing probing difficulty and second, the emergence of distributed applications where private rules increase the difficulty of troubleshooting. We argue that the enforcement of the policy is the key, not the secrecy of the policy itself. In this paper, we demonstrate through the application of game theory that public firewall rules when coupled with false information (lying) are not only viable but actually better.

Original languageEnglish
Title of host publication5th IEEE Workshop on Secure Network Protocols, NPSEC'09
Pages25-30
Number of pages6
DOIs
StatePublished - 2009
Event5th IEEE Workshop on Secure Network Protocols, NPSEC'09 - Princeton, NJ, United States
Duration: Oct 13 2009Oct 13 2009

Publication series

Name5th IEEE Workshop on Secure Network Protocols, NPSEC'09

Conference

Conference5th IEEE Workshop on Secure Network Protocols, NPSEC'09
Country/TerritoryUnited States
CityPrinceton, NJ
Period10/13/0910/13/09

Fingerprint

Dive into the research topics of 'Information game of public firewall rules'. Together they form a unique fingerprint.

Cite this