Configuration and testing of firewalls based on given high-level policies

Vatrozid je uređaj ili programska podrška koji omogućuje nadziranje i upravljanje mrežnim prometom između računalnih mreža ili njihovih segmenata. Upravljanje se vrši na temelju apstraktnih pristupnih politika koje su prevedene u niz pravila za vatrozid te se svaki mrežni paket uspoređuje s navedenim pravilima te shodno tome propušta ili odbacuje. U ovom radu se opisuje programsko rješenje koje na automatiziran način prevodi apstraktne politike zadane u obliku modela temeljenog na grafu, uz prisutnost opisa računalne mreže, u niz pravila za vatrozide te ih razmješta na vatrozid uređaje zadane u mreži. Dodatno, razvijen je alat za testiranje ispravnosti generiranih pravila u odnosu na zadane politike te njihove raspodjele po vatrozidima u mreži.A firewall is a device or software that enables monitoring and management of network traffic between computer networks or their segments. Management is based on abstract access policies that are translated into a set of firewall rules, and each network packet is compared against these rules to determine whether it should be allowed or dropped. This paper describes a software solution that automatically translates abstract policies, defined in the form of a graph-based model along with a network description, into a set of firewall rules and distributes them to the specified firewall devices in the network. Additionally, a tool has been developed to test the correctness of generated rules with respect to the defined policies and their distribution across the firewalls in the network