Oct 18 2004
Complexity breeds mistakes
A Quantitative Study of Firewall Configuration Errors
This study shows what most people would intuitively think: complex firewall rules are more prone to errors than simple firewall rules. Unluckily, writing and maintaining a ruleset in the real world tends towards complexity due to special needs and size of an organization. It’s easy for me to keep the ruleset on my home firewall simple, but when you take into account the complexity of running a business on the Internet, a small ruleset just isn’t going to cut it for most businesses.
![[del.icio.us]](http://images.del.icio.us/static/img/delicious.small.gif){kind=small}
Comments Off