Hrishikesh B. Acharya

Projection and Division: Linear-Space Verification of Firewalls

A firewall is a packet filter that is placed at the entrance of a private network. It checks the header fields of each incoming packet into the private network and decides, based on the specified rules in the firewall, whether to accept the packet and allow it to proceed, or to discard the packet. A property of a firewall is a set of packets that the firewall is required to accept or discard. Associated with each firewall is a very large set of properties that the firewall needs to satisfy. The space and time complexity of the best known deterministic algorithm, for verifying that a given firewall satisfies a given property, is

Firewall verification and redundancy checking are equivalent

O(n^d)

Nash equilibria in stabilizing systems

, where

Nash Equilibria in Stabilizing Systems

n

Firewall modules and modular firewalls

is the number of rules in the given firewall and

The best keying protocol for sensor networks

d

Linear-time verification of firewalls

is the number of fields checked by the firewall. Usually,

Delay Tolerant Networks: A Retrospective

n

Rules in play: On the complexity of routing tables and firewalls

is around

Incremental Verification of Computing Policies

2000