Reaction policy model based on dynamic organizations and threat context

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5645 LNCS, Issue , 2009, Pages 49-64

  Autrel, Fabien ^a   Cuppens Boulahia, Nora ^a   Cuppens, Frédéric ^a  

^a ECOLE DES MINES DE NANTES   (France)

Author keywords

[No Author keywords available]

Indexed keywords

DYNAMIC ORGANIZATION; FORMAL MODEL; ON DYNAMICS; POLICY MODEL; SECURITY POLICY; SECURITY REQUIREMENTS; SYSTEM ADMINISTRATORS; ORBAC MODELS;

MOBILE SECURITY; SEMANTICS;

SECURITY OF DATA;

EID: 70350362334     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-03007-9_4     Document Type: Conference Paper

References (21)

1. Autrel, F., Cuppens, F., Cuppens-Boulahia, N., Coma, C.: Motorbac 2: a security policy tool. In: Third Joint Conference on Security in Networks Architectures and Security of Information Systems (SARSSI) (2008)
2. Brackney, R.: Cyber-intrusion response. In: Proceedings of the 17th IEEE Symposium on Reliable Distributed Systems (1998)
3. Cuppens, F., Autrel, F., Bouzida, Y., Garcia, J., Gombault, S., Sans, T.: Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework (2006)
4. Cuppens-Boulahia, N., Cuppens, F., Lopez de Vergara, J.E., Vazquez, E., Guerra, J., Debar, H.: An ontology-based approach to react to network attacks. In: Third International Conference on Risk and Security of Internet and Systems (CRiSIS 2008) (2008)
5. Cuppens, F., Cuppens-Boulahia, N.: Modeling contextual security policies. International Journal of Information Security (IJIS) 7(4) (August 2008)
6. Cuppens, F., Cuppens-Boulahia, N., Bouzida, Y., Kanoun, W., Croissant, A.: Expression and deployment of reaction policies. In: SITIS Workshop Web-Based Information Technologies and Distributed Systems (WITDS), Bali, Indonesia (2008)
7. Cuppens, F., Cuppens-Boulahia, N., Ben Ghorbel, M.: High-level conflict management strategies in advanced access control models. Electronic Notes in Theoretical Computer Science (ENTCS) (2007)
8. Cuppens, F., Cuppens-Boulahia, N., Miège, A.: Inheritance hierarchies in the Or-BAC model and application in a network environment. In: Second Foundations of Computer Security Workshop (FCS 2004) (2004)
9. Carver, C.A., Pooch, U.W.: An intrusion response taxonomy and its role in automatic intrusion response. In: IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshop (2000)
10. Dittrich, D.: The DoS project's trinoo distributed denial of service attack tool (1999), http://staff.washington.edu/dittrich/misc/trinoo.analysis
11. Debar, H., Thomas, Y., Cuppens, F., Cuppens-Boulahia, N.: Enabling automated threat response through the use of a dynamic security policy. Journal in Computer Virology 3(3) (2007)
12. Fisch, E.A.: A taxonomy and implementation of automated responses to intrusive behavior. PhD thesis, Texas A and M University (1996)
13. Ferrailo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.R., Chandramouli, R.: Proposed NIST standard for rbac. ACM Transactions on Information and System Security (2001)
14. Gama, P., Ferreira, P.: Obligation policies: An enforcement platform. In: IEEE International Workshop on Policies for Distributed Systems and Networks (2005)
15. Debar, H., Curry, D., Feinstein, B.: The intrusion detection message exchange format (idmef) (2007)
16. Abou El Kalam, A., El Baida, R., Balbiani, P., Benferhat, S., Cuppens, F., Deswarteand, Y., Miège, A., Saurel, C., Trouessin, G.: Organization based access control. In: IEEE 4th International Workshop on Policies for Distributed Systems and Networks (Policy 2003) (2003)
17. Motta, G.H.M.B., Furuie, S.S.: A contextual role-based access control authorization model for electronic patient record. IEEE Transactions on information technology in biomedicine 7(3) (2003)
18. NETCONF Working Group. Netconf., http://tools.ietf.org/wg/netconf/trac/ wiki
19. Preda, S., Cuppens-Boulahia, N., Cuppens, F., Garcia-Alfaro, J., Toutain, L.: Reliable process for security policy deployment. In: International Conference on Security and Cryptography (Secrypt 2007) (2007)
20. Stakhanova, N., Basu, S., Wong, J.: A taxonomy of intrusion response systems. International Journal of Information and Computer Security 1(1/2), 169-184 (2007)
21. Ullman, J.D.: Principles of database and knowledge-base systems. Computer Science Press (1989)