Improving packet filters management through automatic and dynamic schemes

摘要

The development of complex access control architec- tures raises the problem of their management. In this article, we describe an architecture providing packet fil- ters automatic configuration in Internet based networks. Our architecture improves existing proposals in three Different fields. It suppresses the security officer interac- Tions with the management architecture when topology Changes occur thus preventing temporary security holes. Moreover our architecture proposes three optimisations To provide the access control processes with efficient Configurations.