Semantic context aware security policy deployment

Proceedings of the 4th International Symposium on ACM Symposium on Information, Computer and Communications Security, ASIACCS'09

Volumn , Issue , 2009, Pages 251-261

  Preda, Stere ^a   Cuppens, Frédéric ^a   Cuppens Boulahia, Nora ^a   Alfaro, Joaquin G ^b   Toutain, Laurent ^a   Elrakaiby, Yehia ^a  

^a ECOLE DES MINES DE NANTES   (France)

^b CARLETON UNIVERSITY   (Canada)

Author keywords

Access control; Network security; PDP; PEP

Indexed keywords

ACCESS CONTROL POLICIES; CONTEXTUAL CONSTRAINTS; SECURITY DEVICES; SECURITY POLICY; SECURITY REQUIREMENTS; SECURITY RULES; SEMANTIC CONTEXT;

ACCESS CONTROL; SECURITY SYSTEMS;

NETWORK SECURITY;

EID: 77952329338     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1533057.1533092     Document Type: Conference Paper

References (27)

1. Abou el Kalam, A., Baida, R. E., Balbiani, P., Benferhat, S., Cuppens, F., Deswarte, Y., Miège, A., Saurel, C., and Trouessin, G. Organization Based Access Control. In IEEE 4th International Workshop on Policies for Distributed Systems and Networks, pp. 120-131, Lake Come, Italy, 2003.
2. Autrel, F., Cuppens, F., Cuppens-Boulahia, N., and Coma, C. MotOrBAC 2: A security policy tool. In 3rd Joint Conference on Security in Network Architectures (SAR) and Security of Information Systems (SSI), Loctudy, France, Octobre 2008.
3. Alfaro, J. G., Cuppens, F., and Cuppens-Boulahia, N. Analysis of Policy Anomalies on Distributed Network Security Setups. In European Symposium On Research In Computer Security (Esorics), Lecture Notes in Computer Science, 4189, pp. 496-511, Hamburg, Germany, September, 2006.
4. Alfaro, J. G., Boulahia-Cuppens, N., and Cuppens, F. Complete Analysis of Configuration Rules to Guarantee Reliable Network Security Policies. In International Journal of Information Security, 7 (2):103-122, April 2008.
5. Baral, C., and Lobo, J. Formal characterization of active databases. In International Workshop on Logic in Databases (LID'96), Italy 1996.
6. Baral, C., Lobo, J., and Trajcevski, G. Formal characterization of active databases: part II. In 5th International Conf. on Deductive and Object-Oriented Databases, 1997.
7. Bartal, Y., Mayer, A., Nissim, K., and Wool, A. Firmato: A novel firewall management toolkit. In 20th IEEE Symposium on Security and Privacy, Oakland, California, 1999.
8. Bertino, E., Bonatti, P. A. and Ferrari, E. TRBAC: A temporal role-based access control model. In ACM TIS-SEC, 4 (3):191233, 2001.
9. Bertino, E., Catania, B., Damiani, M. L. and Perlasca, P. Geo-rbac: a spatially aware rbac. In 10th ACM Symposium on Access control Models and Technologies, June 2005.
10. Cholewka, D. G., Botha, R. A., and Eloff, J. H. P.. A Context-sensitive Access Control Model and Prototype Implementation. In IFIP TC 11 16th Annual Working Conference on Information Security, Beijing, China, 2000.
11. Clemente, F., Lopez, G., Martinez, G., and Gomez-Skarmeta, A. Deployment of a Policy-Based Management System for the Dynamic Provision of IPsec-Based VPNs in IPv6 Networks. In 2005 Symposium on Applications and the Internet Workshops, pp. 10-13, 2005.
12. Cuppens, F. and Cuppens-Boulahia, N. Modeling contextual security policies. In International Journal of Information Security, 7 (4):285-305, 2008.
13. Cuppens, F., Cuppens-Boulahia, N., Sans, T. and Miege, A. A formal approach to specify and deploy a network security policy. In 2nd Workshop on Formal Aspects in Security and Trust, pp. 203-218, Toulouse, France, 2004.
14. Cuppens-Boulahia, N., Cuppens, F., Abi Haidar, D. and Debar H. Negotiation of Prohibition: An Approach Based on Policy Rewriting. In 23rd International Information Security Conference (SEC 2008), Italy, September 2008.
15. Debar, H., Thomas, Y., Cuppens, F. and Cuppens-Boulahia, N. Enabling Automated Threat Response through the Use of a Dynamic Security Policy. In Journal in Computer Virology (JCV), 3 (3):195-210, 2007.
16. Debar, H., Thomas, Y., Cuppens, F. and Cuppens-Boulahia, N. Using contextual security policies for threat response. In Third GI International Conference on Detection of Intrusions & Malware, and Vulnerability Assessment (DIMVA), Berlin, Germany, 2006.
17. Franco, T., Lima, W., Silvestrin, G., Pereira, R. C., Almeida, M. J. B, Tarouco, L. M. R., Granville, L. Z., Beller, A., Jamhour, E., and Fonseca, M. Substituting COPS-PR: An Evaluation of NETCONF and SOAP for Policy Provisioning. In 7th IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'06), pp. 195-204, USA, 2006.
18. Hwang, K. and Gangadhran, M. Micro-Firewalls for Dynamic Network Security with Distributed Intrusion Detection. In International Symp. on Network Computing and Applications, 2001.
19. IETF Netconf Working Group. [On-line]. Available from: http://www.ops.ietf.org/netconf/.
20. McDaniel, P. On Context in Authorization Policy. In 8th ACM Symposium On Access Control Models and Technologies (SACMAT 2003), Como, Italy, June 2003.
21. Permis project. [On-line]. Available from: http://sec.cs.kent.ac.uk/ permis/.
22. Preda, S., Cuppens, F., Cuppens-Boulahia, N., Alfaro, J. G., and Toutain, L. Reliable Process for Security Policy Deployment. In International Conf. on Security and Cryptography, Spain, 2007.
23. Sandhu, R., Coyne, E. J., Feinstein, H. L., and Youman, C. E. Role-Based Access Control Models. In IEEE Computer, 29 (2):38-47, 1996.
24. Shibboleth system. [On-line]. Available from: http://shibboleth. internet2.edu/.
25. Strassner, C. J. Policy-based Network Management, Solutions for the Next Generation. Elsevier, Morgan Kaufmann Publishers 2004. ISBN: 1-55860-859-1.
26. Xian, F., Jin, H., Liu, K. and Han, Z. A Mobile-Agent based Distributed Dynamic μFirewall Architecture. In 9th International Conf. on Parallel and Distributed Systems, pp. 431-436, 2002.
27. YencaP, a Netconf agent for Linux. [On-line]. Available from: http://ensuite.sourceforge.net/.