A formal approach for the evaluation of network security mechanisms based on RBAC policies

Electronic Notes in Theoretical Computer Science

Volumn 121, Issue SPEC. ISS., 2005, Pages 117-142

  Laborde, R ^a   Nasser, B ^a   Grasset, F ^a   Barrere F ^a   Benzekri, A ^a  

^a IRIT   (France)

Author keywords

Colored Petri Nets; Network Security; Security Management

Indexed keywords

COMPUTER NETWORKS; CRYPTOGRAPHY; DATA PRIVACY; MATHEMATICAL MODELS; MULTI AGENT SYSTEMS; PETRI NETS;

COLORED PETRI NETS; NETWORK SECURITY; SECURITY MANAGEMENT; SECURITY MECHANISMS;

SECURITY OF DATA;

EID: 13544255494     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2004.10.011     Document Type: Conference Paper

References (40)

1. Al-Shaer Ehab and Hamed Hazem, Discovery of Policy Anomalies in Distributed Firewalls, in IEEE INFOCOMM'04, 2004
2. Bandara Arosha K, Emil C Lupu, Jonathan Moffet, Alessandra Russo, A Goal-based Approach to Policy Refinement, in: IEEE Policy, 2004
3. Barrere F., A. Benzekri, F. Grasset, R. Laborde, B. Nasser, SPIDERNet: A Security Policy Derivation tool for Networks, in 3rd IEEE Latina America Network Operations and Management Symposium, 2003
4. Barrere F., A. Benzekri, F. Grasset, R. Laborde, B. Nasser, Inter-Domains policy negociation. in: IEEE Policy, 2003
5. M. Bishop Computer Security: Art and Science 2003 Addison-Wesley 0-201-44099-7
6. J. Burch, E. Clarke, D. Long, K. McMillan, D. Dill, and L. Hwang Symbolic Model Checking: 1020 states and beyond Information and Computation 1992 142 170
7. Cholvy L., F. Cuppens, Analysing consistency of security policy, IEEE Symposium on Security and Privacy, 1997
8. R. Crook, D. Ince, and B. Nuseibeh Modeling Access Policies using Roles in Requirements Engineering Information and Software Technology 2003
9. D.F. Ferraiolo, R. Sandhu, S. Gavrila, D.R. Kuhn, and R. Chandramouli A Proposed Standard for Role-Based Access Control Proposed 4/4/2003 Draft NIST, 2003, URL http://csrc.nist.gov/rbac
10. Guttman J., Filtering postures: Local enforcement for global policies, IEEE Symposium on Security and Privacy, 1997
11. Guttman J., A. Herzog, F. Thayer, Authentication and confidentiality via IPsec, 6th European Symposium in Computer Security ESORICS, 2000
12. Hinrichs S., Policy Based Management: bridging the gap, in 15th Annual Computer Security Applications Conference (ACSAC 99), 1999
13. D. Jackson Alloy: a lightweight object modeling notation ACM Transactions on Software Engineering and Methodology (TOSEM) 11 2 2002 256 290
14. N.R. Jennings, and S. Bussmann Agent based Control Systems, why are they suited to engineering complex systems? IEEE Control Systems Magazine 23 3 2003
15. K. Jensen An Introduction to the Theoretical Aspects of Coloured Petri Nets J.W. de Bakker W.-P. de Roever G. Rozenberg A Decade of Concurrency Lecture Notes in Computer Science vol. 803 1994 Springer-Verlag 230 272
16. Knorr Konstantin, Multilevel Security and Information Flow in Petri Net Workflows, in: Proceedings of the 9th International Conference on Telecommunication Systems - Modeling and Analysis, Special Session on Security Aspects of Telecommunication Systems, 2001
17. L.M. Kristensen, S. Christensen, and K. Jensen The Practitioner's Guide to Coloured Petri Nets International Journal on Software Tools for Technology Transfer 2 1998 98 132 Springer Verlag
18. I. Lück, C. Schäfer, and H. Krumm Model-based Tool-Assistance for Packet-Filter Design IEEE Policy LNCS 1995 2001 Springer-Verlag 120 136
19. Krzysztof Juszczyszyn, "Verifying Enterprise's Mandatory Access Control Policies with Coloured Petri Nets", in Twelfth International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, June 2003
20. I. Lück, S. Vögel, and H. Krumm Model-based configuration of VPNs Proc. 8th IEEE/IFIP Network Operations and Management Symposium NOMS 2002 2002 589 602
21. C. Meadows The NRL Protocol Analyzer: An Overview Journal of Logic Programming 26 2 February 1996 113 131
22. Melliar-Smith P., J. Rushby, The Enhanced HDM system for specication and verication, in Proc. VerkShop III, Wat-sonville, CA, Feb. 1985, pp. 41-43, published as ACM Software Engineering Notes, Vol. 10, No. 4
23. Moffett J.D., Control Principle and Role Hierarchies, 3rd ACM Workshop on Role Based Access Control, 1998
24. J. Moffet, and M. Sloman Policy Hierarchies for Distributed Systems Management IEEE Journal on Selected Areas in Communications 11 9 1993
25. Moore B., E. Ellesson, J. Strassner, A. Westerinen, "Policy Core Information Model - Version 1 Specification", RFC 3060, February 2001
26. M. Nyanchama, and S. Osborn The role graph model and conflict of interest ACM Transactions on Information and System Security (TISSEC) 2 1999
27. S. Owre, J. Rushby, and N. Shankar PVS: A prototype verification system Lecture Notes in Computer Science Vol. 607 1992 Springer-Verlag
28. Peri R., "Specification and verification of security policies", PhD Dissertation, University of Virginia, January 1996
29. P. Samarati, and S. De Capitani di Vimercati, Access Control: Policies, Models and Mechanisms Foundations of Security Analysis and Design LNCS 2171 2001 Springer-Verlag
30. Westerinen A., J. Schnizlein, J. Strassner, M. Scherling, B. Quinn, S. Herzog, A. Huynh, M. Carlson, J. Perry, S. Wald-busser, "Terminology for Policy-Based Management", RFC 3198, November 2001
31. Wies R., Using a Classification of Management Policies for Policy Specification and Policy Transformation, In Proc. of the 4th IFIP/IEEE Int. Symposium on Integrated Network Management, 1995
32. D. Wijesekera, and S. Jajodia A propositional policy algebra for access control ACM Transactions on Information and System Security (TISSEC) 6 2003
33. Yavatkar R., D. Pendarakis, R. Guerin, "A Framework for Policy-based Admission Control", RFC 2753, January 2000
34. URL http://www.solsoft.com
35. URL http://www.dmtf.org/standards/cim
36. IBM Corporation, An Architectural Blueprint for Autonomic Computing, IBM white papers, April 2003
37. URL http://wwws.sun.com/software/solutions/n1/index.html
38. URL http://www.microsoft.com/windowsserversystem/dsi/design.mspx
39. http://h71028.www7.hp.com/enterprise/cache/6842-0-0-225-121.aspx
40. URL http://wiki.daimi.au.dk/cpntools/cpntools.wiki