Improving the configuration management of large network security systems

Porto de Albuquerque, J. , Isenberg, H., Krumm, H. and Lício de Geus, P. (2005) Improving the configuration management of large network security systems. In: 16th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management (DSOM 2005), Barcelona, Spain, 24-26 October 2005, pp. 36-47. ISBN 9783540293880 (doi: 10.1007/11568285_4)

Full text not currently available from Enlighten.


The security mechanisms employed in today’s networked environments are increasingly complex and their configuration management has an important role for the protection of these environments. Especially in large scale networks, security administrators are faced with the challenge of designing, deploying, maintaining, and monitoring a huge number of mechanisms, most of which have complicated and heterogeneous configuration syntaxes. This work offers an approach for improving the configuration management of network security systems in large-scale environments. We present a configuration process supported by a modelling technique that uniformly handles different mechanisms and by a graphical editor for the system design. The editor incorporates focus and context concepts for improving model visualisation and navigation.

Item Type:Conference Proceedings
Glasgow Author(s) Enlighten ID:Porto de Albuquerque, Professor Joao
Authors: Porto de Albuquerque, J., Isenberg, H., Krumm, H., and Lício de Geus, P.
College/School:College of Social Sciences > School of Social and Political Sciences > Urban Studies
Journal Name:Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Related URLs:

University Staff: Request a correction | Enlighten Editors: Update this record