Result Details

A Formal Approach to Network Security Analysis

MATOUŠEK, P.; RYŠAVÝ, O.; ŠVÉDA, M.; RÁB, J.; ČEJKA, R. A Formal Approach to Network Security Analysis. Brno: Faculty of Information Technology BUT, 2008. 20 p.
Type
report
Language
English
Authors
Matoušek Petr, doc. Ing., Ph.D., M.A., DIFS (FIT)
Ryšavý Ondřej, doc. Ing., Ph.D., DIFS (FIT)
Švéda Miroslav, prof. Ing., CSc., DIFS (FIT), UTKO (FEEC)
Ráb Jaroslav, Ing., DIFS (FIT)
Čejka Rudolf, Ing., CVT (FIT)
Abstract

This paper deals with an approach to security analysis of TCP/IP-based computer networks. The method developed stems from a formal model of network topology with changing link states, and deploys bounded model checking of network security properties supported by SAT-based decision procedure. Its implementation consists of a set of tools that provide automatic analysis of router configurations, network topologies, and states with respect to checked properties. While the paper aims at supporting a real practice, its form strives to be exact enough to explain the principles of the method in detail.

Keywords

network security analysis, bounded model checking, network modeling, SAT-based decision procedure

Published
2008
Pages
20
Publisher
Faculty of Information Technology BUT
Place
Brno
BibTeX 
@misc{BUT192649,
  author="Petr {Matoušek} and Ondřej {Ryšavý} and Miroslav {Švéda} and Jaroslav {Ráb} and Rudolf {Čejka}",
  title="A Formal Approach to Network Security Analysis",
  year="2008",
  pages="20",
  publisher="Faculty of Information Technology BUT",
  address="Brno",
  url="https://www.fit.vut.cz/research/publication/8572/"
}
Files
Projects
Safety and security of networked embedded system applications, GACR, Standardní projekty, GA102/08/1429, start: 2008-01-01, end: 2010-12-31, completed
Security-Oriented Research in Information Technology, MŠMT, Institucionální prostředky SR ČR (např. VZ, VC), MSM0021630528, start: 2007-01-01, end: 2013-12-31, running
Research groups
NES@FIT - Networks and distributed systems research group (RG NES@FIT)
Departments
Department of Information Systems (DIFS)
Back to top