Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations

Cornelius Diekmann; Andreas Korsten; Georg Carle

doi:10.1109/CNSM.2015.7367384

Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations

Cornelius Diekmann, Andreas Korsten, Georg Carle

Informatik 8 - Lehrstuhl für Netzarchitekturen und Netzdienste

Technische Universität München

Publikation: Beitrag in Buch/Bericht/Konferenzband › Konferenzbeitrag › Begutachtung

5 Zitate (Scopus)

Abstract

In network management, when it comes to security breaches, human error constitutes a dominant factor. We present our tool topoS which automatically synthesizes low-level network configurations from high-level security goals. The automation and a feedback loop help to prevent human errors. Except for a last serialization step, topoS is formally verified with Isabelle/HOL, which prevents implementation errors. In a case study, we demonstrate topoS by example. For the first time, the complete transition from high-level security goals to both firewall and SDN configurations is presented.

Originalsprache	Englisch
Titel	Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015
Redakteure/-innen	Edmundo Roberto Mauro Madeira, Joan Serrat, Jurgen Schonwalder, Corinna Schmitt, Mauro Tortonesi
Herausgeber (Verlag)	Institute of Electrical and Electronics Engineers Inc.
Seiten	366-371
Seitenumfang	6
ISBN (elektronisch)	9783901882777
DOIs	https://doi.org/10.1109/CNSM.2015.7367384
Publikationsstatus	Veröffentlicht - 28 Dez. 2015
Veranstaltung	11th International Conference on Network and Service Management, CNSM 2015 - Barcelona, Spanien Dauer: 9 Nov. 2015 → 13 Nov. 2015

Publikationsreihe

Name	Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015

Konferenz

Konferenz	11th International Conference on Network and Service Management, CNSM 2015
Land/Gebiet	Spanien
Ort	Barcelona
Zeitraum	9/11/15 → 13/11/15

Zugriff auf Dokument

10.1109/CNSM.2015.7367384

Andere Dateien und Links

Verknüpfung zur Publikation in Scopus

Dieses zitieren

Diekmann, C., Korsten, A., & Carle, G. (2015). Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations. in E. R. M. Madeira, J. Serrat, J. Schonwalder, C. Schmitt, & M. Tortonesi (Hrsg.), Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015 (S. 366-371). Artikel 7367384 (Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/CNSM.2015.7367384

Diekmann, Cornelius ; Korsten, Andreas ; Carle, Georg. / Demonstrating topoS : Theorem-prover-based synthesis of secure network configurations. Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015. Hrsg. / Edmundo Roberto Mauro Madeira ; Joan Serrat ; Jurgen Schonwalder ; Corinna Schmitt ; Mauro Tortonesi. Institute of Electrical and Electronics Engineers Inc., 2015. S. 366-371 (Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015).

@inproceedings{493b4b569fee473ca32a34e58a69b6c2,

title = "Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations",

abstract = "In network management, when it comes to security breaches, human error constitutes a dominant factor. We present our tool topoS which automatically synthesizes low-level network configurations from high-level security goals. The automation and a feedback loop help to prevent human errors. Except for a last serialization step, topoS is formally verified with Isabelle/HOL, which prevents implementation errors. In a case study, we demonstrate topoS by example. For the first time, the complete transition from high-level security goals to both firewall and SDN configurations is presented.",

author = "Cornelius Diekmann and Andreas Korsten and Georg Carle",

note = "Publisher Copyright: {\textcopyright} 2015 IFIP.; 11th International Conference on Network and Service Management, CNSM 2015 ; Conference date: 09-11-2015 Through 13-11-2015",

year = "2015",

month = dec,

day = "28",

doi = "10.1109/CNSM.2015.7367384",

language = "English",

series = "Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "366--371",

editor = "Madeira, {Edmundo Roberto Mauro} and Joan Serrat and Jurgen Schonwalder and Corinna Schmitt and Mauro Tortonesi",

booktitle = "Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015",

}

Diekmann, C, Korsten, A & Carle, G 2015, Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations. in ERM Madeira, J Serrat, J Schonwalder, C Schmitt & M Tortonesi (Hrsg.), Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015., 7367384, Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015, Institute of Electrical and Electronics Engineers Inc., S. 366-371, 11th International Conference on Network and Service Management, CNSM 2015, Barcelona, Spanien, 9/11/15. https://doi.org/10.1109/CNSM.2015.7367384

Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations. / Diekmann, Cornelius; Korsten, Andreas; Carle, Georg.
Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015. Hrsg. / Edmundo Roberto Mauro Madeira; Joan Serrat; Jurgen Schonwalder; Corinna Schmitt; Mauro Tortonesi. Institute of Electrical and Electronics Engineers Inc., 2015. S. 366-371 7367384 (Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015).

Publikation: Beitrag in Buch/Bericht/Konferenzband › Konferenzbeitrag › Begutachtung

TY - GEN

T1 - Demonstrating topoS

T2 - 11th International Conference on Network and Service Management, CNSM 2015

AU - Diekmann, Cornelius

AU - Korsten, Andreas

AU - Carle, Georg

PY - 2015/12/28

Y1 - 2015/12/28

N2 - In network management, when it comes to security breaches, human error constitutes a dominant factor. We present our tool topoS which automatically synthesizes low-level network configurations from high-level security goals. The automation and a feedback loop help to prevent human errors. Except for a last serialization step, topoS is formally verified with Isabelle/HOL, which prevents implementation errors. In a case study, we demonstrate topoS by example. For the first time, the complete transition from high-level security goals to both firewall and SDN configurations is presented.

AB - In network management, when it comes to security breaches, human error constitutes a dominant factor. We present our tool topoS which automatically synthesizes low-level network configurations from high-level security goals. The automation and a feedback loop help to prevent human errors. Except for a last serialization step, topoS is formally verified with Isabelle/HOL, which prevents implementation errors. In a case study, we demonstrate topoS by example. For the first time, the complete transition from high-level security goals to both firewall and SDN configurations is presented.

UR - http://www.scopus.com/inward/record.url?scp=84964006040&partnerID=8YFLogxK

U2 - 10.1109/CNSM.2015.7367384

DO - 10.1109/CNSM.2015.7367384

M3 - Conference contribution

AN - SCOPUS:84964006040

T3 - Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015

SP - 366

EP - 371

BT - Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015

A2 - Madeira, Edmundo Roberto Mauro

A2 - Serrat, Joan

A2 - Schonwalder, Jurgen

A2 - Schmitt, Corinna

A2 - Tortonesi, Mauro

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 9 November 2015 through 13 November 2015

ER -

Diekmann C, Korsten A, Carle G. Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations. in Madeira ERM, Serrat J, Schonwalder J, Schmitt C, Tortonesi M, Hrsg., Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015. Institute of Electrical and Electronics Engineers Inc. 2015. S. 366-371. 7367384. (Proceedings of the 11th International Conference on Network and Service Management, CNSM 2015). doi: 10.1109/CNSM.2015.7367384

Demonstrating topoS: Theorem-prover-based synthesis of secure network configurations

Abstract

Publikationsreihe

Konferenz

Zugriff auf Dokument

Andere Dateien und Links

Fingerprint

Dieses zitieren