Overview
Part of the book series: Lecture Notes in Computer Science (LNCS, volume 5905)
Part of the book sub series: Security and Cryptology (LNSC)
Included in the following conference series:
Conference proceedings info: ICISS 2009.
Access this book
Tax calculation will be finalised at checkout
Other ways to access
About this book
The management of services and operations in today’s organizations are - coming increasingly dependent on their enterprise local area network (enterprise LAN). An enterprise LAN consists of a set of network zones (logical group of networkelements)correspondingto di?erent departments orsections,connected through various interface switches (typically, Layer-3 switches). The network service accesses between these zones and also with the external network (e. g. , Internet) are governed by a global network security policy of the organization. This global policy is de?ned as a collection of service access rules across various network zones where the services referred network applications conforming to TCP/IP protocol. For example, some of the known network services aressh, t- net,http etc. In reality, the security policy may be incompletely speci?ed; which explicitly states the “permit” and “deny” access rules between speci?c network zones keeping remaining service access paths as unspeci?ed. The global security policy is realized in the network by con?guring the n- work interfaces with appropriate sets of access control rules (ACLs). One of the major challenges in network security management is ensuring the conformation of the distributed security implementations with the global security policy.
Similar content being viewed by others
Keywords
Table of contents (25 papers)
-
Front Matter
Other volumes
-
Information Systems Security
Editors and Affiliations
Bibliographic Information
Book Title: Information Systems Security
Book Subtitle: 5th International Conference, ICISS 2009 Kolkata, India, December 14-18, 2009 Proceedings
Editors: Atul Prakash, Indranil Sen Gupta
Series Title: Lecture Notes in Computer Science
DOI: https://doi.org/10.1007/978-3-642-10772-6
Publisher: Springer Berlin, Heidelberg
eBook Packages: Computer Science, Computer Science (R0)
Copyright Information: Springer-Verlag Berlin Heidelberg 2009
Softcover ISBN: 978-3-642-10771-9Published: 24 November 2009
eBook ISBN: 978-3-642-10772-6Published: 16 November 2009
Series ISSN: 0302-9743
Series E-ISSN: 1611-3349
Edition Number: 1
Number of Pages: XV, 327
Topics: Computer Communication Networks, Cryptology, Systems and Data Security, Information Storage and Retrieval, Management of Computing and Information Systems, Biometrics