Title :
A firewall algebra for OpenStack
Author :
Simon N. Foley;Ultan Neville
Author_Institution :
Department of Computer Science, University College Cork, Ireland
Abstract :
An algebra is proposed for constructing and reasoning about anomaly-free firewall policies. Based on the notion of refinement as safe replacement, the algebra provides operators for sequential composition, union and intersection of policies. The algebra is used to provide a uniform way to specify and reason about OpenStack host-based and network access controls, in particular, security group and perimeter firewall policies.
Keywords :
"Algebra","IP networks","Ports (Computers)","Cloud computing","Access control","Servers"
Conference_Titel :
Communications and Network Security (CNS), 2015 IEEE Conference on
DOI :
10.1109/CNS.2015.7346867
