{"id":"https://openalex.org/W4245179609","doi":"https://doi.org/10.1109/tnsm.2021.3130290","title":"Continuous Verification of Network Security Compliance","display_name":"Continuous Verification of Network Security Compliance","publication_year":2021,"publication_date":"2021-11-24","ids":{"openalex":"https://openalex.org/W4245179609","doi":"https://doi.org/10.1109/tnsm.2021.3130290"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2021.3130290","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2021.3130290","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037479423","display_name":"Claas Lorenz","orcid":"https://orcid.org/0000-0002-9089-6968"},"institutions":[{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Claas Lorenz","raw_affiliation_strings":["Department of Computer Science, University of Potsdam, Potsdam, Germany"],"raw_orcid":"https://orcid.org/0000-0002-9089-6968","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I176453806"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037539499","display_name":"Vera Clemens","orcid":"https://orcid.org/0000-0002-9917-4443"},"institutions":[{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Vera Clemens","raw_affiliation_strings":["Department of Computer Science, University of Potsdam, Potsdam, Germany"],"raw_orcid":"https://orcid.org/0000-0002-9917-4443","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I176453806"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109681856","display_name":"Max Schr\u00f6tter","orcid":null},"institutions":[{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Max Schrotter","raw_affiliation_strings":["Department of Computer Science, University of Potsdam, Potsdam, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I176453806"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044374029","display_name":"Bettina Schnor","orcid":"https://orcid.org/0000-0001-7369-8057"},"institutions":[{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Bettina Schnor","raw_affiliation_strings":["Department of Computer Science, University of Potsdam, Potsdam, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Potsdam, Potsdam, Germany","institution_ids":["https://openalex.org/I176453806"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5037479423"],"corresponding_institution_ids":["https://openalex.org/I176453806"],"apc_list":null,"apc_paid":null,"fwci":2.5919,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.90260736,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"19","issue":"2","first_page":"1729","last_page":"1745"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.9522461891174316},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8446699380874634},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.7321282625198364},{"id":"https://openalex.org/keywords/hol","display_name":"HOL","score":0.5213842988014221},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5081334114074707},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.49131837487220764},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.45487770438194275},{"id":"https://openalex.org/keywords/packet-processing","display_name":"Packet processing","score":0.4527587294578552},{"id":"https://openalex.org/keywords/stateless-protocol","display_name":"Stateless protocol","score":0.4291113615036011},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.42761683464050293},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4175852835178375},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.37594136595726013},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3717436194419861},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.28276872634887695}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.9522461891174316},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8446699380874634},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.7321282625198364},{"id":"https://openalex.org/C17435882","wikidata":"https://www.wikidata.org/wiki/Q17030435","display_name":"HOL","level":2,"score":0.5213842988014221},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5081334114074707},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.49131837487220764},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.45487770438194275},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.4527587294578552},{"id":"https://openalex.org/C103613024","wikidata":"https://www.wikidata.org/wiki/Q230924","display_name":"Stateless protocol","level":3,"score":0.4291113615036011},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.42761683464050293},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4175852835178375},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.37594136595726013},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3717436194419861},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.28276872634887695},{"id":"https://openalex.org/C74650414","wikidata":"https://www.wikidata.org/wiki/Q11397","display_name":"Classical mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C124017977","wikidata":"https://www.wikidata.org/wiki/Q11412","display_name":"Gravitation","level":2,"score":0.0},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnsm.2021.3130290","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2021.3130290","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},{"id":"pmh:oai:kobv.de-opus4-uni-potsdam:56299","is_oa":false,"landing_page_url":"https://publishup.uni-potsdam.de/frontdoor/index/index/docId/56299","pdf_url":null,"source":{"id":"https://openalex.org/S4306400594","display_name":"publish.UP (University of Potsdam)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I176453806","host_organization_name":"University of Potsdam","host_organization_lineage":["https://openalex.org/I176453806"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4099999964237213,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W89211096","https://openalex.org/W158224344","https://openalex.org/W1249296113","https://openalex.org/W1449038650","https://openalex.org/W1675033504","https://openalex.org/W1882012874","https://openalex.org/W2102759139","https://openalex.org/W2103140527","https://openalex.org/W2120237629","https://openalex.org/W2120255160","https://openalex.org/W2123548135","https://openalex.org/W2140073547","https://openalex.org/W2188073520","https://openalex.org/W2292363341","https://openalex.org/W2294280084","https://openalex.org/W2324910104","https://openalex.org/W2339906640","https://openalex.org/W2439679606","https://openalex.org/W2607722316","https://openalex.org/W2725063651","https://openalex.org/W2734979301","https://openalex.org/W2742515467","https://openalex.org/W2889227506","https://openalex.org/W2918935582","https://openalex.org/W2920584172","https://openalex.org/W2963885243","https://openalex.org/W2968149030","https://openalex.org/W2978360181","https://openalex.org/W3009349458","https://openalex.org/W3009725355","https://openalex.org/W3009976229","https://openalex.org/W3017350605","https://openalex.org/W3046676529","https://openalex.org/W3115362793","https://openalex.org/W3122909987","https://openalex.org/W3203439338","https://openalex.org/W4294339610","https://openalex.org/W6606536520","https://openalex.org/W6627884483","https://openalex.org/W6628489088","https://openalex.org/W6637274776","https://openalex.org/W6639592347","https://openalex.org/W6678385351","https://openalex.org/W6686667945","https://openalex.org/W6719622580","https://openalex.org/W6734470941","https://openalex.org/W6759856729","https://openalex.org/W6759911528","https://openalex.org/W6774173563","https://openalex.org/W6774955457","https://openalex.org/W6775030783","https://openalex.org/W6776240636","https://openalex.org/W6781086315"],"related_works":["https://openalex.org/W2035312053","https://openalex.org/W2908539414","https://openalex.org/W2365857366","https://openalex.org/W8359669","https://openalex.org/W2380723950","https://openalex.org/W17249245","https://openalex.org/W2234619324","https://openalex.org/W112987992","https://openalex.org/W40377838","https://openalex.org/W2144255176"],"abstract_inverted_index":{"Continuous":[0],"verification":[1,116,167],"of":[2,13,35,60,82,113,149,153,161,173,194,222],"network":[3,22,154],"security":[4,23],"compliance":[5,69,163,184],"is":[6],"an":[7],"accepted":[8],"need.":[9],"Especially,":[10],"the":[11,27,33,58,80,111,137,150,159,171,192,195,199],"analysis":[12,34],"stateful":[14,36,91,180],"packet":[15,37],"filters":[16,38],"plays":[17],"a":[18,90,96,145,162,166,220],"central":[19],"role":[20],"for":[21,67,183,198,209],"in":[24,57],"practice.":[25],"But":[26],"few":[28],"existing":[29],"tools":[30,117,218],"which":[31],"support":[32],"are":[39],"based":[40],"on":[41],"general":[42],"applicable":[43],"formal":[44,138],"methods":[45],"like":[46],"Satifiability":[47],"Modulo":[48],"Theories":[49],"(SMT)":[50],"or":[51],"theorem":[52],"prover":[53],"and":[54,78,122,127,176,203],"show":[55,191],"runtimes":[56],"order":[59],"minutes":[61],"to":[62,88,103],"hours":[63],"making":[64],"them":[65],"unsuitable":[66],"continuous":[68],"verification.":[70],"In":[71],"this":[72],"work,":[73],"we":[74,135,157],"address":[75],"these":[76],"challenges":[77],"present":[79],"concept":[81],"<italic":[83,140],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[84,141],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">state":[85],"shell":[86],"interweaving</i>":[87],"transform":[89],"firewall":[92,211],"rule":[93,98,212],"set":[94],"into":[95],"stateless":[97],"set.":[99],"This":[100],"allows":[101],"us":[102],"reuse":[104],"any":[105],"fast":[106],"domain":[107,123],"specific":[108],"engine":[109],"from":[110],"field":[112],"data":[114,125],"plane":[115],"leveraging":[118],"smart,":[119],"very":[120],"fast,":[121],"specialized":[124],"structures":[126],"algorithms":[128],"including":[129,179],"Header":[130],"Space":[131],"Analysis":[132],"(HSA).":[133],"First,":[134],"introduce":[136],"language":[139],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">FPL</i>":[142],"that":[143,169],"enables":[144],"high-level":[146],"human-understandable":[147],"specification":[148],"desired":[151],"state":[152],"security.":[155],"Second,":[156],"demonstrate":[158],"instantiation":[160],"process":[164],"using":[165],"framework":[168],"analyzes":[170],"configuration":[172],"complex":[174],"networks":[175],"devices":[177],"-":[178,182],"firewalls":[181],"with":[185],"FPL":[186],"policies.":[187],"Our":[188],"evaluation":[189],"results":[190],"scalability":[193],"presented":[196],"approach":[197],"well":[200,207],"known":[201],"Internet2":[202],"Stanford":[204],"benchmarks":[205],"as":[206,208],"large":[210],"sets":[213],"where":[214],"it":[215],"outscales":[216],"state-of-the-art":[217],"by":[219],"factor":[221],"over":[223],"41.":[224]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":4}],"updated_date":"2026-05-23T08:51:43.019350","created_date":"2025-10-10T00:00:00"}