Specifications of a high-level conflict-free firewall policy language for multi-domain networks
Bin Zhang, Ehab S. Al-Shaer, Radha Jagadeesan, James Riely, Corin Pitcher · 2007
Multiple firewalls typically cooperate to provide security properties for a network, despite the fact that these firewalls are often spatially distributed and configured in isolation. Without a global view of the network configuration, such a system is ripe for misconfiguration, causing conflicts and major security vulnerabilities.