Teste automatizado de regras de firewalls utilizando simulações com GNS3

Abstract

Systems connected to computer networks such are always exposed to threats, and robust protection mechanisms are needed in order to mantain their integrity. Firewalls are an important guarantee for exposed systems, redirection potencially malicious network traffic, identified by the firewall by configurations called rules. Their configuration maintenance, however, especially in corporate environments, is an arduous and error-prone task, amplified by the cumulative nature of its workings. Network administrators often face these challenges with limited resources. Therefore, less costly ways of validating these systems are necessary. The simplest way to verify their functionality is through testing. However, testing is not straightforward, as it requires creating different environments, and the execution of tests is not simple or responsive, involving a great amount of manual work. Within this context, this work aims to create a tool to automate the testing process, avoiding rework for system administrators and simplifying its execution. The tool performs tests in a configured virtual environment, through a graphical interface, quickly and practically. In order to verify its usability and scope, a practical activity of configuring firewall rules was carried out with computer science students, and results and information on its use were collected, which served as a basis for improving the tool. The results indicate success in the proposed strategy, with 74% of students feeling more confident in testing and configuring a firewall after using the software.