Software Design Document for the NETwork Security Evaluation and Configuration Tool (NET-SECT)

The purpose of the Network Security Evaluation and Configuration Tool (NET-SECT) is to provide guidance and make recommendation on the configuration and location of firewalls for user specified network topologies. NET-SECT will allow the user to define a network topology and then to specify the security relationships between managed objects in that topology. A managed object can be a single or group of workstations, firewalls, or other IP addressable components. NET-SECT will analyze the user defined network topology and make recommendations for the required implementation of or how to improve the configuration of existing firewalls. NET-SECT will also make recommendations on the system configuration of the managed objects. In addition, NET- SECT will provide a method for the user to simulate the model''s network security configuration. The simulated performance of the model''s network security configuration can be compared against the user desired security performance.