Analysis of Application-Layer Filtering Policies With Application to HTTP
Download as DOCX, PDF0 likes171 views
This document provides contact information for Praveen Kumar and lists final year IEEE project titles for 2015-2016 available from Nexgen Technology. The first project involves analyzing application layer filtering policies, specifically for HTTP, to detect anomalies in application firewall configurations and reduce conflicting or suboptimal rules. It has developed a model to analyze rule pairs and multiple rules for anomalies, which has been implemented in a tool tested on the Squid web caching proxy.
Analysis of Application-Layer Filtering Policies With Application to HTTP
- 1. NEXGEN TECHNOLOGY FINAL YEAR IEEE PROJECTS TITLES 2015-2016 CONTACT: PRAVEEN KUMAR. L (+91 – 9751442511, +91 – 9791938249) MAIL ID: sunsid1989@gmail.com, praveen@nexgenproject.com web:www.nexgenproject.com . 1. Analysis of Application-Layer Filtering Policies With Application to HTTP Application firewalls are increasingly used to inspect upper-layer protocols (as HTTP) that are the target or vehicle of several attacks and are not properly addressed by network firewalls. Like other security controls, application firewalls need to be carefully configured, as errors have a significant impact on service security and availability. However, currently no technique is available to analyze their configuration for correctness and consistency. This paper extends a previous model for analysis of packet filters to the policy anomaly analysis in application firewalls. Both rule-pair and multirule anomalies are detected, hence reducing the likelihood of conflicting and suboptimal configurations. The expressiveness of this model has been successfully tested against the features of Squid, a popular Web caching proxy offering various access control capabilities. The tool implementing