Harrison, Lane T.
Shue, Craig A.
This pilot study was performed to examine the effects of presenting user activity-based data alongside standard network traffic data on network administrators' firewall configuration behavior, specifically that provided by the PEACE firewall system. Utilizing a web application to simulate interaction with a firewall, behavior was compared between traffic flows containing PEACE or only non-PEACE data. Our results were suggestive of a correlation between PEACE data and increased confidence in decision making, as well as a trend towards marking previously difficult to categorize flows as legitimate and nonmalicious. Further studies with larger sample sizes are necessary to adequately establish causation.
Worcester Polytechnic Institute
Major Qualifying Project
All authors have granted to WPI a nonexclusive royalty-free license to distribute copies of the work, subject to other agreements. Copyright is held by the author or authors, with all rights reserved, unless otherwise noted.