NuAppFirewall: An Open-Source macOS Application Firewall for Corporate Security

Managing network access is essential to ensure the security of both users and corporate ecosystems. On macOS, this control is implemented through Content Filters in firewall applications. However, the state of the practice consists mainly of proprietary consumer tools, while open-source alternatives lack the modularity needed for enterprise adoption. This paper introduces NuAppFirewall, an open-source application firewall developed and deployed in production at Nubank. It includes more than 250,000 automatically generated rules for macOS applications, derived from Nubank’s validated accesses, providing a security foundation that other organizations can leverage for their own implementations.

Authors

Institutions

Publication Details

Published
2025-09-01
DOI
https://doi.org/10.5753/sbseg_estendido.2025.12041
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

NuAppFirewall: An Open-Source macOS Application Firewall for Corporate Security

João Brunet, Arcelino Clemente de Melo, Bianca Pachêco, Carolina Suyungütmüs et al.
Network Security and Intrusion Detection
article

NuAppFirewall: An Open-Source macOS Application Firewall for Corporate Security

João Brunet, Arcelino Clemente de Melo, Bianca Pachêco, Carolina Suyungütmüs, José Truta, Vinicius Delgado, Walber Araújo, Manoel Domingues
article en

Abstract

Managing network access is essential to ensure the security of both users and corporate ecosystems. On macOS, this control is implemented through Content Filters in firewall applications. However, the state of the practice consists mainly of proprietary consumer tools, while open-source alternatives lack the modularity needed for enterprise adoption. This paper introduces NuAppFirewall, an open-source application firewall developed and deployed in production at Nubank. It includes more than 250,000 automatically generated rules for macOS applications, derived from Nubank’s validated accesses, providing a security foundation that other organizations can leverage for their own implementations.

Nubad (United States) (US), Universitas Stikubank (ID)
Openalex Percentile: Top 72%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.