3 ms·
Does anybody have some hints where I can use Z3 to prove rules in multiple nested firewall layers? I found the article about Azure using Z3 to manage the combin
by weitzj 6y ago
Does anybody have some hints where I can use Z3 to prove rules in multiple nested firewall layers?
I found the article about Azure using Z3 to manage the combination of firewall rules fascinating, and I wonder if there is similar stuff out there.
Idea is that a product team can self service their firewall rules after they successfully validated them against the “firewall oracle” implemented in Z3.
Somehow a mix of Z3 and OpenPolicyAgent.
Link to Azure/Z3 https://medium.com/@ahelwer/checking-firewall-equivalence-with-z3-c2efe5051c8f https://medium.com/@ahelwer/checking-firewall-equivalence-wi...