A service dependency modeling framework for policy-based response enforcement

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5587 LNCS, Issue , 2009, Pages 176-195

  Kheir, Nizar ^a,b   Debar, Hervé ^a   Cuppens, Frédéric ^b   Cuppens Boulahia, Nora ^b   Viinikka, Jouni ^a  

^a ORANGE LABS   (France)

^b ECOLE DES MINES DE NANTES   (France)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS RULES; ARCHITECTURE ANALYSIS; DEPENDENCY MODEL; DYNAMIC ACCESS CONTROL; DYNAMIC ADAPTATIONS; FORMAL CONCEPTS; HIGH-LEVEL SYSTEMS; LOCAL RESPONSE; MODEL COMPONENTS; MODELING FRAMEWORKS; MODELING SYSTEMS; MULTIPLE CONFIGURATIONS; MULTIPLE SERVICES; NUMBER OF SERVICES; POLICY ENFORCEMENT; POLICY RULES; RESOURCE CONSUMPTION; RESPONSE PROCESS; SECURITY POLICY; SERVICE ARCHITECTURE; SERVICE DEPENDENCY; SYSTEM ARCHITECTURES; SYSTEM DESIGN;

ACCESS CONTROL; COMPUTER CRIME; RESPONSE TIME (COMPUTER SYSTEMS); REUSABILITY; SECURITY SYSTEMS;

DYNAMIC RESPONSE;

EID: 70350658278     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-02918-9_11     Document Type: Conference Paper

References (21)

1. Stakhanova, N., Basu, S., Wong, J.: A taxonomy of intrusion response systems. Int. Journal of Information and Computer Security 1 (2007)
2. Cuppens, F., Cuppens-Boulahia, N., Bouzida, Y., Kanoun, W., Croissant, A.: Expression and deployment of reaction policies. In: SITIS Wkshp. Web-Based Information Technologies & Distributed Systems (2008)
3. Debar, H., Thomas, Y., Cuppens, F., Cuppens-Boulahia, N.: Enabling automated threat response through the use of a dynamic security policy. Journal in Computer Virology 3 (2007)
4. Cuppens, F., Cuppens-Boulahia, N., Sans, T., Miège, A.: A formal approach to specify and deploy a network security policy. In: Wkshp. Formal Aspects in Security and Trust (2004)
5. Cuppens, F., Miège, A.: Modeling contexts in the or-bac model. In: Proc. Int. Annual Computer Sercurity Application Conf. (2003)
6. Kalam, A.A.E., Baida, R.E., Balbiani, P., Benferhat, S., Cuppens, F., Deswarte, Y., Miège, A., Saurel, C., Trouessin, G.: Organization based access control. In: IEEE Int. Wkshp. Policies for Distributed Systems and Networks (2003)
7. Sandhu, R.S., Coynek, E.J., Feinsteink, H.L., Youmank, C.E.: Role-based access control models. IEEE Computer 28, 38-47 (1996)
8. Debar, H., Curry, D., Feinstein, B.: The intrusion detection message exchange format. Internet Draft, RFC 4765 (March 2007)
9. Preda, S., Cuppens-Boulahia, N., Cuppens, F., Alfaro, J.G., Toutain, L.: Reliable process for security policy deployment. In: Int. conf. Security and Cryptography (2007)
10. Papadaki, M., Furnell, S.M.: Informing the decision process in an automated intrusion response system. Information Security Technical Report 10 (2005)
11. Ensel, C., Keller, A.: Managing application service dependencies with xml and the resource description framework. In: Proc. Int. IEEE Symp. Integrated Management, pp. 661-674 (2001)
12. Ding, H., Sha, L.: Dependency algebra: A tool for designing robust real-time systems. In: Proc. IEEE Int. Real-Time Systems Symp. (2005)
13. Randic, M., Blaskovic, B., Knezevic, P.: Modeling service dependencies in ad hoc collaborative systems. In: Proc. Int. conf. EUROCON (2005)
14. Keller, A., Kar, G.: Dynamic dependencies in application service management. In: Proc. Int. conf. Parallel and Distributed Processing Techniques and Applications (2000)
15. Balepin, I., Maltsev, S., Rowe, J., Levitt, K.N.: Using specification-based intrusion detection for automated response. In: Vigna, G., Krügel, C., Jonsson, E. (eds.) RAID 2003. LNCS, vol. 2820, pp. 136-154. Springer, Heidelberg (2003)
16. Toth, T., Kruegel, C.: Evaluation the impact of automated intrusion response mechanisms. In: Proc. Int. Annual Computer Sercurity Application Conf. (2002)
17. Jahnke, M., Thul, C., Martini, P.: Graph based metrics for intrusion response measures in computer networks. In: IEEE Conf. Local Computer Networks (2007)
18. Gruschke, B.: Integrated event management: Event correlation using dependency graphs. In: Proc. Int. Wkshp. Distributed Systems (1999)
19. Rugina, A.E., Kanoun, K., Kaâniche, M.: A system dependability modeling framework using aadl and gspns. In: de Lemos, R., Gacek, C., Romanovsky, A. (eds.) Architecting Dependable Systems IV. LNCS, vol. 4615, pp. 14-38. Springer, Heidelberg (2007)
20. SAE-AS5506: Sae architecture analysis and design language. Int. Society of Automotive Engineers (November 2004)
21. SAE-AS5506/1: Sae architecture analysis and design language, error model annex. Int. Society of Automotive Engineers (June 2006)