Integrating static analysis and testing for firewall policies
William Formyduval · 2009
Static analysis is a technique of checking firewall policies for common misconfigurations. Because static analysis does not consider the desired behavior of a policy, it cannot detect faults located in partially masked rules. Our new approach, which integrates static analysis and testing, can detect misconfigurations located in partially masked rules.