A Configuration Diagnosis System for Network Access Inspectors

2008 Fiscal Year Final Research Report

• Project/Area Number: 18500050
• Research Category: Grant-in-Aid for Scientific Research (C)
• Allocation Type: Single-year Grants
• Section: 一般
• Research Field: Computer system/Network
• Research Institution: Nagoya Institute of Technology
• Principal Investigator: TAKAHASHI Naohisa Nagoya Institute of Technology, 大学院・工学研究科, 教授 (80335083)
• Co-Investigator(Kenkyū-buntansha): KATAYAMA Yoshiaki 名古屋工業大学, 大学院・工学研究科, 准教授 (10263435)
• Project Period (FY): 2006 – 2008
• Keywords: ネットワークセキュリティ / ファイアウォール / パケットフィルタリング

Research Abstract

本研究では, 安全で安定したネットワークの実現を目指して,ファイアウォールポリシーの診断に関する研究に取り組み, 以下の成果を得た. 1)空間的関係を用いたファイアウォールポリシーの解析と診断のための新たな方法論を提案, 2)上記方法論により従来手法では扱えなかった設定誤りを検出する手法を開発, 3)上記手法を用いたファイアウォール診断システムのプロトタイプを実現, 4)上記方法論を効率的に実現する手法を開発, 5)ポリシーベースの協調による適応型ポリシー制御方式を開発.

Research Products

• [Journal Article] Detection of Conflicts Caused by a Combination of Filters Based on Spatial Relationships (2008)
  • Author(s): Yi Yin, Yoshiaki Katayama and Naohisa Takahashi
  • Journal Title: IPSJ Journal Vol.49, No.9 Pages: 3121-3235
• [Journal Article] Implementation of Filter Reverse Search System based on Spatial Relationships of Filters (2008)
  • Author(s): Yi Yin, Kazuaki Hida, Yoshiaki Katayama, Naohisa Takahashi
  • Journal Title: Journal of Convergence Information Technology Vol.3, No.2 Pages: 6-12
• [Journal Article] Adaptive Route Selection Policy Based on Back Propagation Neural Networks (2008)
  • Author(s): Fang Jing, R.S.Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Journal Title: JOURNAL OF NETWORKS (JNW) Vol.3, No.3 Pages: 34-41
• [Journal Article] A Framework for an Integrated Co-allocator for Data Grid in Multi-sender Environment (2007)
  • Author(s): R. S. Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Journal Title: IEICE Transactions on Communications Vol.E-90-B, No.4 Pages: 742-749
• [Presentation] BISCAL : Bit Vector Based Spatial Calculus for Analyzing the Mis-configurations in Firewall Policies (2009)
  • Author(s): Subana Thanasegaran, Yi Yin, Yuichiro Tateiwa, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: IEICE Technical Report, IA2008-65
  • Place of Presentation: (101-106)
  • Year and Date: 20090000
• [Presentation] Topological Approach to Detect Conflicts in Firewall Policies (2009)
  • Author(s): Subana Thanasegaran, Yi Yin, Yuichiro Tateiwa, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: International Workshop on Security in Systems and Networks, Proc. of 23^<rd>IEEE International Parallel and Distributed Processing Symposium
  • Place of Presentation: SSN-1569173665-paper-3
  • Year and Date: 20090000
• [Presentation] セキュリティポリシーとファイアウォールポリシーの不整合検査手法について (2009)
  • Author(s): 殷奕・片山喜章・高橋直久
  • Organizer: 電子情報通信学会2009年総合大会講演論文集
  • Place of Presentation: (A-7-12)
  • Year and Date: 20090000
• [Presentation] Detection of Conflicts in Time-Dependent Firewall Policies (2009)
  • Author(s): Subana Thanasegaran・立岩佑一郎・片山喜章・高橋直久
  • Organizer: 電子情報通信学会2009年総合大会講演論文集
  • Place of Presentation: (A-7-13)
  • Year and Date: 20090000
• [Presentation] ステートフルファイアウォールを有するLANのためのフィルタ逆引きシステムの実現 (2008)
  • Author(s): 肥田和明, 片山喜章, 高橋直久
  • Organizer: 電子情報通信学会情報ネットワーク研究会IN2007-153
  • Place of Presentation: (65-70)
  • Year and Date: 20080000
• [Presentation] フィルタの空間的関係解析のためのビットベクタ型空間計算法 (2008)
  • Author(s): タナセガラン・スパナ, 股変, 片山喜章, 高橋直久
  • Organizer: 平成20年度電気関係学会東海支部連合大会, セキュリティ基盤技術0079
  • Year and Date: 20080000
• [Presentation] "Dynamic Route Selection Policy Protocol in MANET (2007)
  • Author(s): Fang Jing, R. S. Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: Proc. of IEEE 21st International Conference on Advanced Information Networking and Applications
  • Place of Presentation: Niagara Falls, Ontario, Canada(Vol. II, 673-678)
  • Year and Date: 20070521-23
• [Presentation] Analysis Methods of Firewall Policies by using Spatial Relationships between Filters (2007)
  • Author(s): Yi Yin, R. S. Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: Proc. of IEEE International Conference on Signal Processing Communications and Networking 2007 (ICSCN 2007)
  • Place of Presentation: Chennai, India(348-354)
  • Year and Date: 20070223-24
• [Presentation] Multipath Routing Selection Strategies in Wireless Mobile Ad-Hoc Networks (2007)
  • Author(s): Fang Jing, R. S. Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: Proc. Of IEEE International Conference on Signal Processing Communications and Networking 2007(ICSCN 2007)
  • Place of Presentation: Chennai, India(117-121)
  • Year and Date: 20070223-24
• [Presentation] フィルタリングポリシをトラヒック特性に適応させる機能を有するパケットキャプチャシステム (2007)
  • Author(s): 中村陸, 片山喜章, 高橋直久
  • Organizer: 電子情報通信学会第18回データ工学ワークショップ(DEWS2007)論文集
  • Place of Presentation: (B7-1)
  • Year and Date: 20070000
• [Presentation] Coordinated Co-allocator Model for Data Grid in Multi-sender Environment (2006)
  • Author(s): R. S. Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: Proc. of 4th International Conference on Service Oriented Computing(ACM SIGsoft and SIGweb)
  • Place of Presentation: Chicago, USA
  • Year and Date: 20061204-07
• [Presentation] Inferring the Impact of Firewall Policy Changes by Analyzing Spatial Relations between Packet Filters (2006)
  • Author(s): Yi Yin, R. S. Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: Proc. Of 2006 IEEE International Conference on Communication Technology, Guilin(IEEE Communications Society(2006))
  • Place of Presentation: China
  • Year and Date: 20061127-30
• [Presentation] データグリッドのためのポリシーベースの協調モデル (2006)
  • Author(s): 高橋直久, 片山喜章, R.S.Bhuvaneswaran
  • Organizer: 第23回日本ソフトウエア科学会大会, 「情報爆発」特別セッション
  • Place of Presentation: 東京大学
  • Year and Date: 20060913-14
• [Presentation] On-demand Multipath Routing Protocol with Preferential Path Selection Probabilities for MANET (2006)
  • Author(s): Fang Jing, R. S. Bhuvaneswaran, Yoshiaki Katayama and Naohisa Takahashi
  • Organizer: Proc. of IEEE 20th International Conference on Advanced Information Networking and Application
  • Place of Presentation: (Vol.2, 759-762)
  • Year and Date: 20060000
• [Presentation] Redundant Parallel Data Transfer Schemes for the Grid Environment (2006)
  • Author(s): R.S.Bhuvaneswaran, Yoshiaki .Katayama and Naohisa Takahashi
  • Organizer: Proc. of 4th Australasian Symposium on Grid Computing and e-Research (AusGrid 2006)
  • Place of Presentation: (71-78)
  • Year and Date: 20060000
• [Presentation] 複数ネットワークアクセス検査装置を有するLANのためのフィルタ逆引きシステムの実現 (2006)
  • Author(s): 肥田和明, 片山喜章, 高橋直久
  • Organizer: マルチメディア,分散,協調とモバイルシンポジウム
  • Place of Presentation: (905-908)
  • Year and Date: 20060000
• [Presentation] トラヒック特性に基づく近似機能を有する空間分割型パケットキャプチャシステム (2006)
  • Author(s): 中村陸, 片山喜章, 高橋直久
  • Organizer: 電子情報通信学会技術報告情報ネットワーク研究会
  • Place of Presentation: (79-86)
  • Year and Date: 20060000
• [Patent(Industrial Property Rights)] ファイアウォールの制御方式及び設定解析方式 (2008)
  • Inventor(s): 高橋直久, 片山喜章, 高木麻未
  • Industrial Property Number: 特願2008-31236
  • Filing Date: 2008-02-13
• [Patent(Industrial Property Rights)] ステートフルファイアウォール設定解析方式 (2008)
  • Inventor(s): 高橋直久, 片山喜章, 肥田和明
  • Industrial Property Number: 特願2008-18839
  • Filing Date: 2008-01-30