Guidelines on Firewalls and Firewall Policy (NIST SP 800-41 Revision 1)¶
Scarfone, K., & Hoffman, P. (2009). Guidelines on Firewalls and Firewall Policy (NIST SP 800-41 Revision 1).
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Gatekeeping
- Cybersecurity and network policy. Firewalls, intrusion-detection systems, email gateways, content scanners; "deny by default" is a security primitive.
This sourceEstablishes 'deny by default' (block all traffic not expressly permitted) as a firewall-policy primitive and firewalls as content gates with a false-positive/false-negative error profile; defenders reasoning only on admitted-and-logged traffic miss the unobserved rejected set.
SupportedVerified against the work's full text
NIST SP 800-41r1 recommends deny by default (block traffic not expressly permitted) as the more secure firewall policy, and also discusses IDPS, email firewalls and content filtering.
“This practice, known as deny by default, decreases the risk of attack and can also reduce the volume of traffic carried on the organization’s networks.”
- Cybersecurity and network policy. Firewalls, intrusion-detection systems, email gateways, content scanners; "deny by default" is a security primitive.
Verification¶
Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.
Does it back the claim? Read against the text for 1 of 1 citation: 1 supported. Each verdict is shown under its citation below, with what in the work backs the sentence.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Registry ID ref:3aa997d7172d · see in the full table