Can I read When firewalls fail: Lessons learned from firewall testing on EtoBox?

When firewalls fail: Lessons learned from firewall testing by E.Eugene Schultz is a Computer Science article available to read on EtoBox.

What is When firewalls fail: Lessons learned from firewall testing about?

Firewall testing, if properly conducted, is advantageous in revealing specific ways that firewalls can be breached or bypassed. A previous issue of Network Securify (March 1996) describes a systematic methodology for testing firewalls that SRI Consulting uses. SRI Consulting has conducted a sufficient number of tests to be able to generalize about how firewalls in real-life environments have succumbed to attacks based on this methodology. Unscreened services in hosts protected by the firewall have been the most frequently exploited exposure, followed by exploitation of services that run on the firewall itself, then by exploitation of a dangerous relationship between a firewall and an external router or host on the DMZ. Because testing results depend on the particular testing methodology used, these illustrate that negative entropy in firewalls does occur. This article also provides a list of action items for firewall and network administrators to ensure that firewall defences are adequate.

Who reads When firewalls fail: Lessons learned from firewall testing?

Author

E.Eugene Schultz

Publisher

Elsevier Science; Elsevier ; Elsevier BV (ISSN 1353-4858)

Published

1997

Language

EN

Field

Computer Science (Physical Sciences)