1.9 KiB
Formal Network Models and Their Application to Firewall Policies (UPF-Firewall)
This git repository contains a local mirror of A Formal Network Model and Their Application to Firewall Policies entry of the Archive of Formal Proofs (AFP).
The official AFP releases are tagged. Additionally, this repository may contain extensions (i.e., a development version) that may be submitted (as an update of the UPF_Firewall entry) at a later stage.
Installation
This project depends on another AFP entry: The Unified Policy Framework (UPF). Please follow the official guidelines for installing the AFP locall. For short:
- Download the complete AFP
- Extract the downloaded archive to an directory of your choice
- Let's assume the extracted archive lives in
/home/isabelle/afp
, now execute:
mkdir -p ~/.isabelle/Isabelle2016-1/etc
echo "/home/isabelle/afp" >> ~/.isabelle/Isabelle2016-1/etc/components
Now, you can either link the UPF entry to a sibling directory of UPF_Firewall such
that the import ../../UPF/UPF
in PacketFilter/PolicyCore.thy
is valid. Alternatively,
you need to change this import to $AFP/UPF/UPF
.
How to build
isabelle build -d UPF-Firewall . UPF-Firewall
Authors
- Achim D. Brucker
- Lukas Brügger
- Burkhart Wolff
License
This project is licensed under a 3-clause BSD-style license.
Publications
- Achim D. Brucker, Lukas Brügger, and Burkhart Wolff. Formal Firewall Conformance Testing: An Application of Test and Proof Techniques. In Software Testing, Verification & Reliability (STVR), 25 (1), pages 34-71, 2015. https://www.brucker.ch/bibliography/abstract/brucker.ea-formal-fw-testing-2014