Harrison, Lane T.
Shue, Craig A.
The Policy Enforcement and Access Control for Endpoints (PEACE) system attempts to advance modern firewall technology by allowing a network analyst to associate user activity like keystrokes, mouse clicks, and graphical user interface (GUI text) with network flows by installing an application on organization devices that will report relevant data to the firewall. To test the effectiveness of this new technology, this study records and compares participant behavior when presented with standard network flows verses flows with additional PEACE-exclusive insight. The initial conclusions suggest a positive impact on analyst confidence derived from the introduction of PEACE data, and justify interest in conducting a future large-scale study to more rigorously examine this area.
Worcester Polytechnic Institute
Major Qualifying Project
All authors have granted to WPI a nonexclusive royalty-free license to distribute copies of the work, subject to other agreements. Copyright is held by the author or authors, with all rights reserved, unless otherwise noted.