{"id":"https://openalex.org/W2014254858","doi":"https://doi.org/10.1145/1035582.1035583","title":"<i>Firmato</i>","display_name":"<i>Firmato</i>","publication_year":2004,"publication_date":"2004-11-01","ids":{"openalex":"https://openalex.org/W2014254858","doi":"https://doi.org/10.1145/1035582.1035583","mag":"2014254858"},"language":"en","primary_location":{"id":"doi:10.1145/1035582.1035583","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1035582.1035583","pdf_url":null,"source":{"id":"https://openalex.org/S193109227","display_name":"ACM Transactions on Computer Systems","issn_l":"0734-2071","issn":["0734-2071","1557-7333"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Computer Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111723795","display_name":"Yair Bartal","orcid":null},"institutions":[{"id":"https://openalex.org/I197251160","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017","country_code":"IL","type":"education","lineage":["https://openalex.org/I197251160"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Yair Bartal","raw_affiliation_strings":["The Hebrew University of Jerusalem, Jerusalem, Israel","The Hebrew University of Jerusalem , Jerusalem , Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hebrew University of Jerusalem, Jerusalem, Israel","institution_ids":["https://openalex.org/I197251160"]},{"raw_affiliation_string":"The Hebrew University of Jerusalem , Jerusalem , Israel","institution_ids":["https://openalex.org/I197251160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005354721","display_name":"Alain Mayer","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alain Mayer","raw_affiliation_strings":["CenterRun Inc., Redwood City, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CenterRun Inc., Redwood City, CA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066000219","display_name":"Kobbi Nissim","orcid":"https://orcid.org/0000-0002-6632-8645"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kobbi Nissim","raw_affiliation_strings":["Microsoft Research, SVC, Mountain View, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, SVC, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042818115","display_name":"Avishai Wool","orcid":"https://orcid.org/0000-0002-8371-4759"},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Avishai Wool","raw_affiliation_strings":["Tel Aviv University, Ramat Aviv, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tel Aviv University, Ramat Aviv, Israel","institution_ids":["https://openalex.org/I16391192"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.6438,"has_fulltext":false,"cited_by_count":170,"citation_normalized_percentile":{"value":0.98105732,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"22","issue":"4","first_page":"381","last_page":"420"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.938520610332489},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.9215296506881714},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8433539867401123},{"id":"https://openalex.org/keywords/application-firewall","display_name":"Application firewall","score":0.8290130496025085},{"id":"https://openalex.org/keywords/context-based-access-control","display_name":"Context-based access control","score":0.7893028259277344},{"id":"https://openalex.org/keywords/dmz","display_name":"DMZ","score":0.6687741875648499},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.38820141553878784},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.386081725358963},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3316389322280884},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3210243582725525},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.30924350023269653}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.938520610332489},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.9215296506881714},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8433539867401123},{"id":"https://openalex.org/C86444895","wikidata":"https://www.wikidata.org/wiki/Q451816","display_name":"Application firewall","level":4,"score":0.8290130496025085},{"id":"https://openalex.org/C42934231","wikidata":"https://www.wikidata.org/wiki/Q1128692","display_name":"Context-based access control","level":5,"score":0.7893028259277344},{"id":"https://openalex.org/C23103841","wikidata":"https://www.wikidata.org/wiki/Q1074209","display_name":"DMZ","level":3,"score":0.6687741875648499},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.38820141553878784},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.386081725358963},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3316389322280884},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3210243582725525},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30924350023269653},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C74650414","wikidata":"https://www.wikidata.org/wiki/Q11397","display_name":"Classical mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C124017977","wikidata":"https://www.wikidata.org/wiki/Q11412","display_name":"Gravitation","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1035582.1035583","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1035582.1035583","pdf_url":null,"source":{"id":"https://openalex.org/S193109227","display_name":"ACM Transactions on Computer Systems","issn_l":"0734-2071","issn":["0734-2071","1557-7333"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Computer Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W99985435","https://openalex.org/W117280508","https://openalex.org/W272982077","https://openalex.org/W577109147","https://openalex.org/W1496979250","https://openalex.org/W1509405801","https://openalex.org/W1551258534","https://openalex.org/W1594706025","https://openalex.org/W1598119712","https://openalex.org/W1678529581","https://openalex.org/W1860215963","https://openalex.org/W1896822992","https://openalex.org/W1923195206","https://openalex.org/W1977545325","https://openalex.org/W1987379210","https://openalex.org/W2011039300","https://openalex.org/W2028743294","https://openalex.org/W2042448840","https://openalex.org/W2067580212","https://openalex.org/W2077688755","https://openalex.org/W2085153451","https://openalex.org/W2096979376","https://openalex.org/W2099065842","https://openalex.org/W2126536832","https://openalex.org/W2131378480","https://openalex.org/W2135292514","https://openalex.org/W2138623315","https://openalex.org/W2166975838","https://openalex.org/W2256791355","https://openalex.org/W4213060235","https://openalex.org/W4254733025","https://openalex.org/W4285719527","https://openalex.org/W6604790098","https://openalex.org/W6635611149","https://openalex.org/W6635669383","https://openalex.org/W6640594298","https://openalex.org/W6679411908"],"related_works":["https://openalex.org/W2361515550","https://openalex.org/W2057573940","https://openalex.org/W2916429898","https://openalex.org/W2495628081","https://openalex.org/W4363647490","https://openalex.org/W2158110327","https://openalex.org/W2347324149","https://openalex.org/W2399718053","https://openalex.org/W2014254858","https://openalex.org/W2602307710"],"abstract_inverted_index":{"In":[0,20,29],"recent":[1],"years":[2],"packet-filtering":[3],"firewalls":[4],"have":[5],"seen":[6],"some":[7],"impressive":[8],"technological":[9],"advances":[10],"(e.g.,":[11],"stateful":[12],"inspection,":[13],"transparency,":[14],"performance,":[15],"etc.)":[16],"and":[17,23,44,61,100,149],"wide-spread":[18],"deployment.":[19],"contrast,":[21],"firewall":[22,36,104,120,130],"security":[24,59],"&lt;i&gt;management&lt;/i&gt;":[25],"technology":[26],"is":[27,139],"lacking.":[28],"this":[30],"paper":[31],"we":[32,72],"present":[33],"&lt;i&gt;Firmato&lt;/i&gt;,":[34],"a":[35,52,67,86,102,109],"management":[37],"toolkit,":[38],"with":[39,116],"the":[40,58,63,82,90,94,145],"following":[41],"distinguishing":[42],"properties":[43],"components:":[45],"(1)":[46],"an":[47,75,79,128,140],"entity-relationship":[48,83],"model":[49,68,87,95],"containing,":[50],"in":[51,153],"unified":[53],"form,":[54],"global":[55,91],"knowledge":[56,92],"of":[57,62,81,93,111,147],"policy":[60],"network":[64],"topology;":[65],"(2)":[66],"definition":[69],"language,":[70],"which":[71],"use":[73],"as":[74],"interface":[76],"to":[77,114,126],"define":[78],"instance":[80],"model;":[84],"(3)":[85],"compiler,":[88],"translating":[89],"into":[96],"firewall-specific":[97],"configuration":[98],"files;":[99],"(4)":[101],"graphical":[103],"rule":[105],"illustrator.":[106],"We":[107,134],"implemented":[108],"prototype":[110,123],"our":[112,137],"toolkit":[113],"work":[115],"several":[117,132],"commercially":[118],"available":[119],"products.":[121],"This":[122],"was":[124],"used":[125],"control":[127],"operational":[129],"for":[131],"months.":[133],"believe":[135],"that":[136],"approach":[138],"important":[141],"step":[142],"toward":[143],"streamlining":[144],"process":[146],"configuring":[148],"managing":[150],"firewalls,":[151],"especially":[152],"complex,":[154],"multi-firewall":[155],"installations.":[156]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":9}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2016-06-24T00:00:00"}