Method and apparatus for checking firewall policy
OwnerSang Hun LEEinventor
Life of this patent
Estimating the term…
Abstract
A method and apparatus for checking for vulnerabilities in a firewall policy used in a firewall system are provided. The method includes determining whether a target firewall policy is for an existing firewall system or a new firewall system, when the target firewall policy is for the existing firewall system, checking for errors in the target firewall policy by comparing the target firewall policy with an existing firewall policy applied to the existing firewall system, and when the target firewall policy is for the new firewall system, checking for errors in the target firewall policy by simulating a state in which the target firewall policy is applied to the new firewall system.
Claims14
A method of checking a firewall policy, the method comprising:
- determining whether a target firewall policy is for an existing firewall system or a new firewall system;
- when the target firewall policy is for the existing firewall system, checking for errors in the target firewall policy by comparing the target firewall policy with an existing firewall policy applied to the existing firewall system;
- and
- when the target firewall policy is for the new firewall system, checking for errors in the target firewall policy by simulating a state in which the target firewall policy is applied to the new firewall system.
An apparatus for checking a firewall policy, the apparatus comprising:
- a firewall policy receiving unit that receives a target firewall policy;
- a checking unit that checks for errors in the target firewall policy by comparing the target firewall policy with an existing firewall policy applied to an existing firewall system;
- and
- a check result output unit that outputs the results of the checking unit.
Dependencies are inferred from the claim text.