title: ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ Ð¾ÑÐ¸Ð±Ð¾Ðº ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð¼ÐµÐ¶ÑÐµÑÐµÐ²ÑÑ ÑÐºÑÐ°Ð½Ð¾Ð² Ð¼ÐµÑÐ¾Ð´Ð¾Ð¼ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ¸ Ð¼Ð¾Ð´ÐµÐ»Ð¸
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Detecting firewall configuration errors by model verification
Creators: name: ÐÑÐ±Ð°ÐºÐ¸ÑÐ¾Ð²Ð°, ÐÐ°ÑÐ¸Ð½Ð°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: Ð¼ÐµÐ¶ÑÐµÑÐµÐ²Ð¾Ð¹ ÑÐºÑÐ°Ð½
Ð²ÐµÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ñ
ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ñ
Ð¿Ð¾Ð»Ð¸ÑÐ¸ÐºÐ° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸
Ð¿ÑÐ¾Ð²ÐµÑÐºÐ° Ð¼Ð¾Ð´ÐµÐ»Ð¸
firewall
verification
configuration
security policy
model checking

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ Ð¾ÑÐ¸Ð±Ð¾Ðº ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð¼ÐµÐ¶ÑÐµÑÐµÐ²ÑÑ ÑÐºÑÐ°Ð½Ð¾Ð² Ð¼ÐµÑÐ¾Ð´Ð¾Ð¼ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ¸ Ð¼Ð¾Ð´ÐµÐ»Ð¸. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÐµÑÑÑ ÐºÐ¾ÑÑÐµÐºÑÐ½Ð¾ÑÑÑ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð¼ÐµÐ¶ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÐºÑÐ°Ð½Ð° Ð¸ ÐµÐµ ÑÐ¾Ð¾ÑÐ²ÐµÑÑÑÐ²Ð¸Ðµ Ð¿Ð¾Ð»Ð¸ÑÐ¸ÐºÐµ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ½Ð°Ð»Ð¸Ð· Ð¼ÐµÑÐ¾Ð´Ð¾Ð² Ð²ÐµÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¼ÐµÐ¶ÑÐµÑÐµÐ²ÑÑ ÑÐºÑÐ°Ð½Ð¾Ð². 2. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð²ÐµÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð¼ÐµÐ¶ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÐºÑÐ°Ð½Ð°. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿Ð° Ð²ÐµÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¸ Ð¾ÑÐµÐ½ÐºÐ° ÐµÐ³Ð¾ ÑÐ°Ð±Ð¾ÑÑ. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ñ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÐµ Ð¼ÐµÑÐ¾Ð´Ñ Ð²ÐµÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¸ Ð²ÑÐ±ÑÐ°Ð½ Ð¼ÐµÑÐ¾Ð´ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ¸ Ð¼Ð¾Ð´ÐµÐ»Ð¸. ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð¼ÐµÐ¶ÑÐµÑÐµÐ²ÑÑ ÑÐºÑÐ°Ð½Ð¾Ð². Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð²ÐµÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð¼ÐµÐ¶ÑÐµÑÐµÐ²ÑÑ ÑÐºÑÐ°Ð½Ð¾Ð² Ð¼ÐµÑÐ¾Ð´Ð¾Ð¼ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ¸ Ð¼Ð¾Ð´ÐµÐ»Ð¸, Ð¾ÑÑÐ»ÐµÐ¶Ð¸Ð²Ð°ÑÑÐµÐµ ÑÐ¾ÑÑÐ¾ÑÐ½Ð¸Ðµ ÑÐ¾ÐµÐ´Ð¸Ð½ÐµÐ½Ð¸Ð¹. ÐÐ»Ñ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ ÑÑÐµÐ´ÑÑÐ²Ð° Ð±ÑÐ» Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½ Ð¼ÐµÑÐ¾Ð´ Ð²ÑÐ±Ð¾ÑÐ° Ð¾Ð¿ÑÐ¸Ð¼Ð°Ð»ÑÐ½Ð¾Ð³Ð¾ Ð¼Ð½Ð¾Ð¶ÐµÑÑÐ²Ð° ÑÐ¾ÑÑÐ¾ÑÐ½Ð¸Ð¹ Ð¼Ð¾Ð´ÐµÐ»Ð¸, ÐºÐ¾ÑÐ¾ÑÑÐµ Ð¾Ð½Ð° Ð¼Ð¾Ð¶ÐµÑ Ð´Ð¾ÑÑÐ¸Ð³Ð½ÑÑÑ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð´Ð»Ñ Ð´Ð°Ð»ÑÐ½ÐµÐ¹ÑÐµÐ³Ð¾ ÑÐ°Ð·Ð²Ð¸ÑÐ¸Ñ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ¾Ðº ÑÑÐµÐ´ÑÑÐ² Ð²ÐµÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÑÑÐµÐ´ÑÑÐ² Ð¼ÐµÑÐ¾Ð´Ð¾Ð¼ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ¸ Ð¼Ð¾Ð´ÐµÐ»Ð¸.
description: The purpose of the work is to find errors in the configuration of firewalls by checking the model. The subject of the study is the correctness of the firewall configuration and its compliance with the security policy. Tasks to be solved during the research: 1. Analysis of firewall verification methods. 2. Development of a method for verifying the firewall configuration. 3. Development of a verification prototype and evaluation of its work. In the course of the work, various verification methods were investigated and a model verification method was chosen. Research in the field of firewall security was analyzed. As a result of the work, a tool for verifying the configuration of firewalls by checking the model, tracking the status of connections, was developed. A method for selecting optimal model parameters for effective operation of the tool was proposed. The obtained results can be used for further development of software verification tools by the model verification method.