Application of the XTT rule-based model for formal design and verification of Internet security systems

Abstract

The paper presents a concept of support for the design and analysis of Internet security systems with a rule-based methodology. It considers a web security architecture, including a network and application-level firewall with intrusion detection systems. The XTT methodology allows for hierarchical design, and on-line analysis of rule-based systems. It is applied using the Unified Firewall Model, allowing for implementationagnostic formal design and verification of firewalls. UFM extension aimed at integration with ModSecurity HTTP firewall are introduced. © Springer-Verlag Berlin Heidelberg 2007.