期刊名称：International Journal of Computer Trends and Technology
电子版ISSN：2231-2803
出版年度：2013
卷号：4
期号：8-4
出版社：Seventh Sense Research Group
摘要：Firewall is an application software that plays a major role in securing the private networks, so that is the reason why this firewalls are becoming as a popular applications in enterprise security as the quality of protection provided by a firewall directly depends on the quality of its policy (i.e., configuration), ensuring the correctness of firewall policies is important and yet difficult. To help ensure the correctness, we propose a radical testing approach for firewall policies. Here in this paper we are proposing a test that can successfully test the firewall policy which will check for two things one is Authentication and one more is malware if the node is not in the list of authenticated and also if it found any packet having malware automatically it blocks that particular IP from the next time onwards. We have conducted a test on a set of firewall policies and a set of faulty policies to detect malicious packets with default packets. Generally, our experimental results state that a higher structural coverage packet has the higher fault detection capability. Coming to the reduced Structural coverage maintains the same fault detection level with the original set.
关键词：Firewall policy; validation; test packet generation; structural coverage; fault detection
