{"id":"https://openalex.org/W796748794","doi":null,"title":"Firewall policy diagram: novel data structures and algorithms for modeling, analysis, and comprehension of network firewalls","display_name":"Firewall policy diagram: novel data structures and algorithms for modeling, analysis, and comprehension of network firewalls","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W796748794","mag":"796748794"},"language":"en","primary_location":{"id":"mag:796748794","doi":null,"is_oa":false,"landing_page_url":"https://kuscholarworks.ku.edu/bitstream/handle/1808/11462/Clark_ku_0099D_12729_DATA_1.pdf?sequence=1","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088673653","display_name":"Arvin Agah","orcid":"https://orcid.org/0000-0001-7600-6212","observed_orcids":["https://orcid.org/0000-0001-7600-6212"]},"institutions":[{"id":"https://openalex.org/I146416000","display_name":"University of Kansas","ror":"https://ror.org/001tmjg57","country_code":"US","type":"education","lineage":["https://openalex.org/I146416000"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arvin Agah","raw_affiliation_strings":["University of Kansas"],"raw_orcid":"https://orcid.org/0000-0001-7600-6212","affiliations":[{"raw_affiliation_string":"University of Kansas","institution_ids":["https://openalex.org/I146416000"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003044998","display_name":"Patrick G. Clark","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I146416000","display_name":"University of Kansas","ror":"https://ror.org/001tmjg57","country_code":"US","type":"education","lineage":["https://openalex.org/I146416000"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick G. Clark","raw_affiliation_strings":["University of Kansas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kansas","institution_ids":["https://openalex.org/I146416000"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I146416000"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/access-control-lists","display_name":"access control lists","score":0.8080000281333923},{"id":"https://openalex.org/keywords/firewall","display_name":"firewall","score":0.7860000133514404}],"concepts":[{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.7529878616333008},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6476530432701111},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.624093770980835},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5066283345222473},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5002801418304443},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4980580806732178},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.42745065689086914},{"id":"https://openalex.org/C86444895","wikidata":"https://www.wikidata.org/wiki/Q451816","display_name":"Application firewall","level":4,"score":0.41866859793663025},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.41513803601264954},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.16282051801681519},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.15432444214820862},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.10323095321655273},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C2776401274","wikidata":"https://www.wikidata.org/wiki/Q3756855","display_name":"Accretion (finance)","level":2,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:796748794","doi":null,"is_oa":false,"landing_page_url":"https://kuscholarworks.ku.edu/bitstream/handle/1808/11462/Clark_ku_0099D_12729_DATA_1.pdf?sequence=1","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W24397523","https://openalex.org/W40144721","https://openalex.org/W101001524","https://openalex.org/W168478060","https://openalex.org/W1496979250","https://openalex.org/W1507039213","https://openalex.org/W1560883761","https://openalex.org/W1569994728","https://openalex.org/W1577504098","https://openalex.org/W1678529581","https://openalex.org/W1713270692","https://openalex.org/W1718921878","https://openalex.org/W1782239975","https://openalex.org/W1860215963","https://openalex.org/W1967656199","https://openalex.org/W1982255089","https://openalex.org/W1983405933","https://openalex.org/W2007297573","https://openalex.org/W2018951244","https://openalex.org/W2030224590","https://openalex.org/W2043811931","https://openalex.org/W2053619330","https://openalex.org/W2066541735","https://openalex.org/W2080267935","https://openalex.org/W2096244038","https://openalex.org/W2114161382","https://openalex.org/W2120237629","https://openalex.org/W2120255160","https://openalex.org/W2121141821","https://openalex.org/W2123756094","https://openalex.org/W2126885859","https://openalex.org/W2128429374","https://openalex.org/W2131999424","https://openalex.org/W2132434720","https://openalex.org/W2133576332","https://openalex.org/W2135292514","https://openalex.org/W2135870733","https://openalex.org/W2138623315","https://openalex.org/W2139835332","https://openalex.org/W2140069682","https://openalex.org/W2140073547","https://openalex.org/W2141335864","https://openalex.org/W2143436119","https://openalex.org/W2144911386","https://openalex.org/W2148656332","https://openalex.org/W2148662748","https://openalex.org/W2161129850","https://openalex.org/W2165084894","https://openalex.org/W2167306747","https://openalex.org/W2913158960","https://openalex.org/W2988119170","https://openalex.org/W3145128584"],"related_works":["https://openalex.org/W2397675542","https://openalex.org/W2081306377","https://openalex.org/W4254961594","https://openalex.org/W7096309499","https://openalex.org/W7098006318","https://openalex.org/W2068327653","https://openalex.org/W2096244038","https://openalex.org/W2352652655","https://openalex.org/W137966278","https://openalex.org/W2124890737"],"abstract_inverted_index":{"Firewalls,":[0],"network":[1,83],"devices,":[2],"and":[3,21,35,121,230,263,270,280,339,381,419,430,486,510,528,530],"the":[4,45,57,75,79,91,94,97,106,130,134,140,151,154,158,167,170,177,188,197,209,224,228,237,313,335,344,349,363,368,388,398,406,444,476,483,488,491,503,539],"access":[5,98,190,250,325],"control":[6,99],"lists":[7],"that":[8,63,129,259,266,293,347,409,464,538],"manage":[9],"traffic":[10,200],"are":[11,316,410,415],"very":[12,87],"important":[13,88],"components":[14],"of":[15,47,71,78,90,133,142,153,191,199,236,247,277,296,318,391,466,474,502],"modern":[16],"networking":[17],"from":[18,227,490],"a":[19,69,81,86,119,184,192,216,233,245,257,274,286,427,440,448,458,499,511,518,534],"security":[20,217],"regulatory":[22],"perspective.":[23],"When":[24],"computers":[25],"were":[26,30,38,66],"first":[27],"connected,":[28],"they":[29],"communicating":[31],"with":[32,96],"trusted":[33,61],"peers":[34],"nefarious":[36],"intentions":[37,65],"neither":[39],"recognized":[40],"nor":[41],"important.":[42],"However,":[43,150],"as":[44,146,148,169,285,358,360,395,439],"reach":[46],"networks":[48,171],"expanded,":[49],"systems":[50],"could":[51,59],"no":[52],"longer":[53],"be":[54,60,220,268,357,545],"certain":[55],"whether":[56],"peer":[58],"or":[62],"their":[64],"good.":[67],"Therefore,":[68],"couple":[70],"decades":[72],"ago,":[73],"near":[74],"widespread":[76,131],"adoption":[77],"Internet,":[80],"new":[82,275],"device":[84],"became":[85,105,172],"part":[89],"landscape,":[92],"i.e.,":[93],"firewall":[95,135,155,168,252,507],"list":[100],"(ACL)":[101],"router.":[102],"These":[103],"devices":[104,205,509],"sentries":[107],"to":[108,161,181,284,341,367,442,461,470,480,517,547],"an":[109,162,261,392],"organization's":[110],"internal":[111],"network,":[112],"still":[113],"allowing":[114],"some":[115],"communication;":[116],"however,":[117],"in":[118,156,166,186,306,337,506,533],"controlled":[120],"audited":[122],"manner.":[123],"It":[124,468],"was":[125],"during":[126],"this":[127,413,496],"time":[128],"expansion":[132],"spawned":[136],"significant":[137],"research":[138,211,414],"into":[139,256,417],"science":[141],"deterministically":[143],"controlling":[144],"access,":[145],"fast":[147],"possible.":[149],"success":[152],"securing":[157],"enterprise":[159],"led":[160],"ever":[163],"increasing":[164],"complexity":[165,178],"more":[173],"inter-connected.":[174],"Over":[175],"time,":[176],"has":[179],"continued":[180],"increase,":[182],"yielding":[183],"difficulty":[185],"understanding":[187,235,523],"allowed":[189,327],"particular":[193],"device.\r\nThis":[194],"dissertation":[195,497],"investigates":[196],"comprehension":[198],"flow":[201],"through":[202],"these":[203],"complex":[204],"by":[206,222,328,397,552],"focusing":[207],"on":[208,214,249],"following":[210],"topics:\r\n\u2022":[212],"Expands":[213],"how":[215,340],"policy":[218,330],"may":[219,544],"processed":[221],"decoupling":[223],"original":[225],"rules":[226],"policy,":[229],"instead":[231],"allow":[232],"holistic":[234],"solution":[238,304,484],"space":[239,265,305,355],"being":[240],"represented.":[241],"This":[242,521],"means":[243],"taking":[244,514],"set":[246,276],"constraints":[248],"(i.e.,":[251],"rules),":[253],"synthesizing":[254],"them":[255,532],"model":[258,501],"represents":[260,348],"accept":[262],"deny":[264],"can":[267,356],"quickly":[269],"accurately":[271],"analyzed.\r\n\u2022":[272],"Introduces":[273],"data":[278,345,493],"structures":[279],"algorithms":[281],"collectively":[282],"referred":[283],"Firewall":[287,434],"Policy":[288,435],"Diagram":[289],"(FPD).":[290],"A":[291],"structure":[292,346],"is":[294,326,334,447],"capable":[295,317],"modeling":[297,531],"Internet":[298],"Protocol":[299],"version":[300],"4":[301],"packet":[302,394],"(IPv4)":[303],"memory":[307],"efficient,":[308],"mathematically":[309],"set-based":[310],"entities.":[311],"Using":[312],"FPD":[314],"we":[315],"answering":[319],"difficult":[320],"questions":[321],"such":[322,537],"as:":[323],"what":[324,333,475],"one":[329],"over":[331],"another,":[332],"difference":[336],"spaces,":[338],"efficiently":[342],"parse":[343],"large":[350,359],"search":[351,354],"space.":[352,445],"The":[353,385],"288;":[361],"representing":[362],"total":[364],"values":[365],"available":[366,389,422],"source":[369],"IP":[370,374],"address":[371,375],"(232),":[372],"destination":[373,378],"(2":[376,383],"32),":[377],"port":[379],"(216),":[380],"protocol":[382],"8).":[384],"fields":[386,408],"represent":[387],"bits":[390],"IPv4":[393,423],"defined":[396],"Open":[399],"Systems":[400],"Interconnection":[401],"(OSI)":[402],"model.":[403],"Notably,":[404],"only":[405],"header":[407,424],"necessary":[411],"for":[412,457,513],"taken":[416],"account":[418],"not":[420],"every":[421],"value.\r\n\u2022":[425],"Presents":[426],"concise,":[428],"precise,":[429],"descriptive":[431],"language":[432,460],"called":[433],"Query":[436],"Language":[437],"(FPQL)":[438],"mechanism":[441],"explore":[443],"FPQL":[446],"Backus":[449],"Normal":[450],"Form":[451],"(Backus-Naur":[452],"Form)":[453],"(BNF)":[454],"compatible":[455],"notation":[456],"query":[459],"do":[462],"just":[463],"sort":[465],"exploration.":[467],"looks":[469],"translate":[471],"concise":[472],"representations":[473],"end":[477],"user":[478],"needs":[479],"know":[481],"about":[482],"space,":[485],"extract":[487],"information":[489],"underlying":[492],"structures.\r\n\u2022":[494],"Finally,":[495],"presents":[498],"behavioral":[500],"capabilities":[504],"found":[505],"type":[508],"process":[512],"vendor-specific":[515],"nuances":[516],"common":[519],"implementation.":[520],"includes":[522],"interfaces,":[524],"routes,":[525],"rules,":[526],"translation,":[527],"policies;":[529],"consistent":[535],"manner":[536],"many":[540],"different":[541],"vendor":[542],"implementations":[543],"compared":[546],"each":[548],"other.":[549],")Abstract":[550],"shortened":[551],"UMI.)":[553]},"counts_by_year":[{"year":2018,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}