Modelling and detecting the cascade vulnerability problem using soft constraints

Proceedings of the ACM Symposium on Applied Computing

Volumn 1, Issue , 2004, Pages 383-390

  Bistarelli, Stefano ^a,b   Foley, Simon N ^c   O'Sullivan, Barry ^c  

^a UNIVERSITY OF CHIETI   (Italy)

^b Istituto di informatica e telematica del Consiglio nazionale delle ricerche   (Italy)

^c UNIVERSITY COLLEGE CORK   (Ireland)

Author keywords

Constraints; Multilevel Security; Security; Soft Constraints

Indexed keywords

APPROXIMATION THEORY; CONSTRAINT THEORY; INTEROPERABILITY; LINEAR PROGRAMMING; PROBLEM SOLVING; PUBLIC POLICY; RISK ASSESSMENT; SECURITY OF DATA;

CONSTRAINTS; MULTILEVEL SECURITY; SECURITY; SOFT CONSTRAINTS;

COMPUTER NETWORKS;

EID: 2442501617     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (29)

1. Computer security requirements - guidance for applying the department of defense trusted computer system evaluation criteria in specific environments. Technical Report CSC-STD-003-85, 1985. Orange Book.
2. Trusted computer system evaluation criteria: Trusted network interpretation. Technical report, National Computer Security Center, 1987. Red Book.
3. P. Amman and R. Sandhu. The extended schematic protection model. Journal of Computer Security, 1(4), 1992.
4. G. J. Badros, A. Borning, and P. J. Stuckey. The cassowary linear arithmetic constraint solving algorithm. ACM Transactions on Computer Human Interaction, 8(4):276-306, dec 2001.
5. G. Bella and S. Bistarelli. Soft Constraints for Security Protocol Analysis: Confidentiality. In Proc. of the 3rd International Symposium on Practical Aspects of Declarative Languages (PADL'01), LNCS 1990, pages 108-122. Springer-Verlag, 2001.
6. E. Bertino et al. An authorization model and its formal semantics. In Proceedings of the European Symposium on Research in Computer Security, pages 127-142. Springer LNCS 1485, 1998.
7. S. Bistarelli, H. Fargier, U. Montanari, F. Rossi, T. Schiex, and G. Verfaillie. Semiring-based CSPs and Valued CSPs: Frameworks, properties, and comparison. CONSTRAINTS: An international journal. Kluwer, 4(3), 1999.
8. S. Bistarelli and S. Foley. Analysis of integrity policies using soft constraints. In Proceedings of IEEE Workshop Policies for Distributed Systems and Networks, pages 77-80, June 2003.
9. S. Bistarelli, U. Montanari, and F. Rossi. Semiring-based Constraint Solving and Optimization. Journal of the ACM, 44(2):201-236, Mar 1997.
10. W. Chan, R. Andersen, P. Beame, and D. Notkin. Combining constraint solving and symbolic model checking for a class of systems with non-linear constraints. In O. Grumberg, editor, Computer Aided Verification, 9th International Conference, CAV'97 Proceedings, volume 1254 of Lecture Notes in Computer Science, pages 316-327, Haifa, Israel, June 1997. Springer-Verlag.
11. G. Delzanno and T. Bultan. Constraint-based verification of client-server protocols. In Proceedings CP2001, volume 2239 of Lecture Notes in Computer Science, pages 286-?? Springer-Verlag, 2001.
12. M. Dincbas, P. V. Hentenryck, H. Simonis, A. Aggoun, T. Graf, and F. Berthier. The constraint logic programming language chip. In Proceedings of FGCS, pages 693-702, 1988.
13. T. Fahle, U. Junker, S. Karisch, N. Kohl, M. Sellmann, and B. Vaaben, Constraint programming based column generation for crew assignment. Technical Report TR-RI-99-212, University of Paderborn, 1999.
14. J. A. Fitch and L. J. Hoffman. A shortest path network security model. Computers and Security, 12(2):169-189, 1993.
15. S. Foley. Conduit cascades and secure synchronization. In ACM New Security Paradigms Workshop, 2000.
16. L. Gong and X. Qian. The complexity and composability of secure interoperation. In Proceedings of the Symposium on Security and Privacy, pages 190-200, Oakland, CA, May 1994. IEEE Computer Society Press.
17. S. Gritalis and D. Spinellis. The cascade vulnerability problem: The detection problem and a simulated annealing approach to its correction. Microprocessors and Microsystems, 21(10):621-628, 1998.
18. M. Harrison, W. Ruzzo, and J. Ullman. Protection in operating systems. Communications of the ACM, 19:461-471, 1976.
19. R. Horton et al. The cascade vulnerability problem. Journal of Computer Security, 2(4):279-290, 1993.
20. D. McCullough. Noninterference and the composability of security properties. In Proceedings 1988 IEEE Symposium on Security and Privacy, pages 177-186. IEEE Computer Society Press, 1988.
21. J. Millen and M. Schwartz. The cascading problem for interconnected networks. In 4th Aerospace Computer Security Applications Conference, pages 269-273. IEEE CS Press, Dec. 1988.
22. U. Montanari. Networks of constraints: Fundamental properties and applications to picture processing. Information Science, 7:95-132, 1974. Also Technical Report, Carnegie Mellon University, 1971.
23. U. Montanari. Networks of constraints: Fundamental properties and applications to picture processing. Information Science, 7:95-132, 1974. Also Technical Report, Carnegie Mellon University, 1971.
24. A. D. Pierro, C. Hankin, and H. Wiklicky. On approximate non-interference. In editor, Proceedings of WITS'02 - Workshop on Issues in the Theory of Security. IFIP WG1.7, 2002.
25. J. Puget. A c++ implementation of clp. In Proceedings of the 2nd Singapore International Conference on Intelligent Systems, 1994.
26. J.-C. Regin. A filtering algorithm for constraints of difference in csps. In Proceedings AAAI-94, pages 362-367, 1994.
27. T. Schiex. Possibilistic constraint satisfaction problems, or "how to handle soft constraints?". In Proc. 8th Conf. of Uncertainty in AI, pages 269-275, 1992.
28. J. B. V.G. Bharadwaj. Towards automated negotiation of access control policies. In Proceedings of IEEE Workshop Policies for Distributed Systems and Networks, pages 77-80, June 2003.
29. M. Wallace. Practical applications of constraint programming. Constraints, 1(1-2):139-168, 1996.