@conference { ISI:000361756400014,
	title = {A Formal Approach to Verify Completeness and Detect Anomalies in Firewall Security Policies},
	booktitle = {FOUNDATIONS AND PRACTICE OF SECURITY (FPS 2014)},
	series = {Lecture Notes in Computer Science},
	volume = {8930},
	year = {2015},
	note = {7th International Symposium on Foundations and Practice of Security (FPS), Concordia Univ, Montreal, CANADA, NOV 03-05, 2014},
	pages = {221-236},
	abstract = {Security policies are a relevant solution to protect information systems from undue accesses. In this paper, we develop a formal and rigorous automata-based approach to design and analyze security policies. The interest of our approach is that it can be used as a common basis for analyzing several aspects of security policies, instead of using a distinct approach and formalism for studying each aspect. We first develop a procedure that synthesizes automatically an automaton which implements a given security policy. Then, we apply this synthesis procedure to verify completeness of security policies and detect several types of anomalies in security policies. We also study space and time complexities of the developed procedures.},
	isbn = {978-3-319-17040-4; 978-3-319-17039-8},
	issn = {0302-9743},
	doi = {10.1007/978-3-319-17040-4\_14},
	author = {Khoumsi, Ahmed and Krombi, Wadie and Erradi, Mohammed},
	editor = {Cuppens, F and GarciaAlfaro, J and Heywood, NZ and Fong, PWL}
}
