Visible to the public Quantifying the Security Effectiveness of Firewalls and DMZs

TitleQuantifying the Security Effectiveness of Firewalls and DMZs
Publication TypeConference Paper
Year of Publication2018
AuthorsChen, Huashan, Cho, Jin-Hee, Xu, Shouhuai
Conference NameProceedings of the 5th Annual Symposium and Bootcamp on Hot Topics in the Science of Security
PublisherACM
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-6455-3
KeywordsCollaboration, comparability, composability, cybersecurity dynamics, demilitarized zones, Dynamical Systems, firewalls, Human Behavior, Metrics, preventive dynamics, pubcrawl, Resiliency, Scalability, science of security, security metrics, security quantification
Abstract

Firewalls and Demilitarized Zones (DMZs) are two mechanisms that have been widely employed to secure enterprise networks. Despite this, their security effectiveness has not been systematically quantified. In this paper, we make a first step towards filling this void by presenting a representational framework for investigating their security effectiveness in protecting enterprise networks. Through simulation experiments, we draw useful insights into the security effectiveness of firewalls and DMZs. To the best of our knowledge, these insights were not reported in the literature until now.

URLhttp://doi.acm.org/10.1145/3190619.3190639
DOI10.1145/3190619.3190639
Citation Keychen_quantifying_2018