Agenda

prof. Pedro Miguel Adão, Technical University of Lisbon (UTL) Portogallo

Abstract:
In complex networks, filters may be applied at different nodes to control how packets flow. In this seminar we will discuss how this filtering can be used to enforce a network-wide security policy. In particular, we will define a notion of network-wide security-goals, and present an algorithm that from these and the network topology, is able to localize the filters and generate the configurations for each firewall node in the network. One can then prove that these individual configurations enforce the global policy. The implementation of these configurations in each firewall node is done using Mignis — an open source tool to generate firewalls from declarative, semantically explicit configurations.