Podešavanje i ispitivanje vatrozida na temelju zadanih politika visoke razine apstrakcije

master's thesis

• Title (english): Configuration and testing of firewalls based on given high-level policies
• Author: Marta Gračner
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Marin Golub (član povjerenstva)
• Committee member: Vlado Sruk (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023-07-13, Croatia

Abstract

Vatrozid je uređaj ili programska podrška koji omogućuje nadziranje i upravljanje mrežnim prometom između računalnih mreža ili njihovih segmenata. Upravljanje se vrši na temelju apstraktnih pristupnih politika koje su prevedene u niz pravila za vatrozid te se svaki mrežni paket uspoređuje s navedenim pravilima te shodno tome propušta ili odbacuje. U ovom radu se opisuje programsko rješenje koje na automatiziran način prevodi apstraktne politike zadane u obliku modela temeljenog na grafu, uz prisutnost opisa računalne mreže, u niz pravila za vatrozide te ih razmješta na vatrozid uređaje zadane u mreži. Dodatno, razvijen je alat za testiranje ispravnosti generiranih pravila u odnosu na zadane politike te njihove raspodjele po vatrozidima u mreži.

Abstract (english)

A firewall is a device or software that enables monitoring and management of network traffic between computer networks or their segments. Management is based on abstract access policies that are translated into a set of firewall rules, and each network packet is compared against these rules to determine whether it should be allowed or dropped. This paper describes a software solution that automatically translates abstract policies, defined in the form of a graph-based model along with a network description, into a set of firewall rules and distributes them to the specified firewall devices in the network. Additionally, a tool has been developed to test the correctness of generated rules with respect to the defined policies and their distribution across the firewalls in the network.

• Keywords: vatrozid; apstraktne pristupne politike; vatrozid pravila; automatsko podešavanje
• Keywords (english): firewall; abstract access policies; firewall rules; automated configuration
• Language: croatian
• URN:NBN: urn:nbn:hr:168:369386
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-10-11 08:55:41