Taking back control of privacy: a novel framework for preserving cloud-based firewall policy confidentiality

摘要

Would you intentionally make your firewall leak packets that are supposed to be blocked? This paper presents an interesting argument for when this might be desired. When your firewall is hosted, the cloud service provider (CSP) would know your firewall configuration. Is that a problem? The argument is that you trust the CSP, but individual CSP staff members could have malicious intentions; knowing your firewall configuration would make it easy for them to launch an attack.