Test Case Generation for Firewall Testing

Tugkan Tuglular Dept. of Computer Engineering, Izmir Institute of Technology, Izmir, Turkey [email protected] Firewall tests have to be performed to verify that the firewall works as specified. In this work, a test case generation approach is developed, which defines test cases based on the firewall rule sequence and uses real traffic database to prepare test packets. Test packets can be used or injected to check if the firewall implementation is erroneous, i.e. the rules do not correspond to the actions of the firewall. Although injection based firewall testing is accepted as an inefficient way of testing firewall implementations in the literature [1], there has been no alternative method developed yet. Most of the academic work focuses on testing of firewall rules where firewall implementation is assumed error-free. Even if firewall implementation is errorfree, a firewall can be hacked and programmed to behave differently from the intended security policy. In that case, real time injection based testing is one of the ways to reveal the security breach.