Using Firewalls to Enforce Enterprise-wide Policies over Standard Client-Server Interactions

We propose and evaluate a novel framework for enforcing global coordination and control policies over message passing software components in enterprise computing environments. This framework combines the use of firewalls, both per-node software and dedicated firewalls, with an existing coordination and control system to enforce policies that, among other properties, are stateful and communal. The firewalls act as a set of distributed reference monitors that filter messages exchanged between the interacting software components. The coordination and control system coordinates the firewalls to enforce a specific set of policies, passing only messages allowed by these policies. Filtering decisions may be based on credentials presented to the coordination and control system as well as system state accumulated over time. This filtering approach decouples coordination and control from application implementation, allowing the coordination and control mechanism and application implementations t...

• Type: Journal
• Year: 2006
• Where: JCP
• Authors: Tuan Phan, Zhijun He, Thu D. Nguyen
• Keywords: Firewalls, JCP 2006, Policies, Software Components