PolicyGlobe: A framework for integrating network and operating system security policies

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 53-62

  Okhravi, Hamed ^a   Kagin, Ryan H ^a   Nicol, David M ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Access control; Firewall; Policy integration; SE linux; Security policy

Indexed keywords

ACCESS CONTROL POLICIES; EMPIRICAL STUDIES; FIREWALL POLICIES; GLOBAL EFFECTS; INTEGRATING NETWORKS; INTEGRATION ALGORITHM; NETWORK DEVICES; NETWORK SECURITY POLICY; NETWORKED SYSTEMS; ONE-MACHINE; OPERATING SYSTEM SECURITY; OPERATING SYSTEMS; POLICY INTEGRATION; SECURITY POLICY; SECURITY-ENHANCED LINUX; TRAFFIC CONTROL DEVICES;

ACCESS CONTROL; COMPUTER OPERATING SYSTEMS; COMPUTER VIRUSES; CONTROL; INTEGRATION; OPTIMIZATION; SECURITY SYSTEMS; SPONTANEOUS EMISSION; TRAFFIC SIGNALS;

NETWORK SECURITY;

EID: 74049119313     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655062.1655074     Document Type: Conference Paper

References (17)

1. Se-linux. http://www.nsa.gov/research/selinux/index.shtml.
2. E. Al-Shaer and H. Hamed. Modeling and management of firewall policies. IEEE Trans. Network and Service Management, 1(1), 2004.
3. M. Archer, E. Leonard, and M. Pradella. Analyzing security-enhanced linux policy specifications. In Proceedings of the 4th IEEE international Workshop on Policies For Distributed Systems and Networks, June 2003.
4. P. Bonatti, S. D. C. di Vimercati, and P. Samarati. A modular approach to composing access control policies. In Proceedings of the 7th ACM Conference on Computer and Communications Security, pages 164-173, November 2000.
5. P. Bonatti, S. D. C. di Vimercati, and P. Samarati. An algebra for composing access control policies. ACM Trans. on Inf. System Security, 5:1-35, 2002.
6. R. Hull, B. Kumar, and D. Lieuwen. Towards federated policy management. In Proceedings of the 4th IEEE Iinternational Workshop on Policies For Distributed Systems and Networks, page 183, June 2003.
7. T. Jaeger, A. Edwards, and X. Zhang. Managing access control policies using access control spaces. In Proceedings of the Seventh ACM Symposium on Access Control Models and Technologies, pages 3-12, June 2002.
8. T. Jaeger, R. Sailer, and X. Zhang. Analyzing integrity protection in the selinux example policy. In Proceedings of the 11th USENIX Security Symposium, pages 59-74, August 2003.
9. S. Jajodia, P. Samarati, V. S. Subrahmanian, and E. Bertino. A unified framework for enforcing multiple access control policies. In Proceedings of the 1997 ACM SIGMOD International Conference on Management of Data, pages 474-485, May 1997.
10. R. H. Kagin. Optimizing Security policy integration and consistency validation. M.S. thesis, University of Illinois at Urbana-Champaign, Urbana, 2008.
11. P. A. Loscocco and S. D. Smalley. Meeting critical security objectives with security-enhanced linux. In Proceedings of the 2001 Ottawa Linux Symposium, July 2001.
12. D. M. Nicol, W. H. Sanders, S. Singh, and M. Seri. Usable global network access policy for process control systems. IEEE Security & Privacy, 6(6):30-36, 2008.
13. H. Okhravi. Security policy integration and consistency validation. M.S. thesis, University of Illinois at Urbana-Champaign, Urbana, 2007.
14. S. Owre, N. Shankar, and J. M. Rushby. User guide for the pvs specification and verification system. Computer Science Laboratory, SRI International, 1993.
15. I. Silicon Graphics. Standard template library programmers guide. http://www.sgi.com/tech/stl/, 2008.
16. T. Technology. Setools policy analysis suite. http://oss.tresys.com/ projects/setools, 2008.
17. G. Zanin and L. V. Mancini. Towards a formal model for security policies specification and validation in the selinux system. In Proceedings of the Ninth ACM Symposium on Access Control Models and Technologies, pages 136-145, June 2004.