loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Authors: Abdelrahman Elfaki and Amer Aljaedi

Affiliation: College of Computing and Information Technology, University of Tabuk, Tabuk 71491, Saudi Arabia

Keyword(s): Firewall Anomalies, Firewall Rules, Network Policies, Knowledge Graph.

Abstract: Implementing firewall policy with defining firewall rules is a cumulative process that could take place in different periods and depend on the network conditions, which makes it prone to errors and difficult to validate without effective tools. Such tools should be carefully designed to capture and spot firewall configuration errors and anomalies. The solution in this paper consists of four steps, which are: formalizing the firewall rules by using FOL, defining the general form of the anomaly, collecting all active destinations’ IP addresses and port numbers in updated lists, and applying the proposed FOL rules for detecting firewall anomalies. The general form has been represented by using knowledge graph for supporting visualization aiming to detect firewall anomalies by extracting knowledge from the knowledge graph and its formalization rules. The proposed method is efficient and capable of discovering all types of firewall anomalies.

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.145.167.178

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Elfaki, A. and Aljaedi, A. (2023). Deep Analysis and Detection of Firewall Anomalies Using Knowledge Graph. In Proceedings of the 12th International Conference on Pattern Recognition Applications and Methods - ICPRAM; ISBN 978-989-758-626-2; ISSN 2184-4313, SciTePress, pages 411-417. DOI: 10.5220/0011704900003411

@conference{icpram23,
author={Abdelrahman Elfaki and Amer Aljaedi},
title={Deep Analysis and Detection of Firewall Anomalies Using Knowledge Graph},
booktitle={Proceedings of the 12th International Conference on Pattern Recognition Applications and Methods - ICPRAM},
year={2023},
pages={411-417},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011704900003411},
isbn={978-989-758-626-2},
issn={2184-4313},
}

TY - CONF

JO - Proceedings of the 12th International Conference on Pattern Recognition Applications and Methods - ICPRAM
TI - Deep Analysis and Detection of Firewall Anomalies Using Knowledge Graph
SN - 978-989-758-626-2
IS - 2184-4313
AU - Elfaki, A.
AU - Aljaedi, A.
PY - 2023
SP - 411
EP - 417
DO - 10.5220/0011704900003411
PB - SciTePress