Using equivalence relations for corrective enforcement of security policies

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6258 LNCS, Issue , 2010, Pages 139-154

  Khoury, Raphaël ^a   Tawbi, Nadia ^a  

^a UNIVERSITÉ LAVAL   (Canada)

Author keywords

Inlined reference monitors; Monitoring; Program transformation; Security policy enforcement

Indexed keywords

EQUIVALENCE RELATIONS; INPUT AND OUTPUTS; PRIORI KNOWLEDGE; PROGRAM TRANSFORMATIONS; REFERENCE MONITORS; RUNTIMES; SECURITY POLICY; SECURITY POLICY ENFORCEMENT;

COMPUTER ARCHITECTURE; INTERNET; MATHEMATICAL MODELS; NETWORK ARCHITECTURE; SECURITY SYSTEMS; SET THEORY;

NETWORK SECURITY;

EID: 78649280596     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-14706-7_11     Document Type: Conference Paper

References (18)

1. Alpern, B., Schneider, F.B.: Recognizing safety and liveness. Distributed Computing 2, 17-126 (1987) (Pubitemid 18536927)
2. Alpern, B., Schneider, F.: Defining liveness. Information Processing Letters 21(4), 181-185 (1985) (Pubitemid 15580746)
3. Bauer, A., Leucker, M., Schallhart, C.: Monitoring of real-time properties. In: Arun-Kumar, S., Garg, N. (eds.) FSTTCS 2006. LNCS, vol. 4337, pp. 260-272. Springer, Heidelberg (2006)
4. Bauer, L., Ligatti, J., Walker, D.: More enforceable security policies. In: Proceedings of the Foundations of Computer Security Workshop (July 2002)
5. Bielova, N., Massacci, F., Micheletti, A.: Towards practical enforcement theories. In: Knapskog, S.J. (ed.) NordSec 2009. LNCS, vol. 5838, pp. 239-254. Springer, Heidelberg (2009)
6. Chabot, H.: Sécurisation de code basée sur la combinaison d'analyse statique et dynamique, génération de moniteur partir d'un automate de Rabin. Master's thesis, Laval University (2008)
7. Chabot, H., Khoury, R., Tawbi, N.: Generating in-line monitors for Rabin automata. In: Jøsang, A., Maseng, T., Knapskog, S.J. (eds.) NordSec 2009. LNCS, vol. 5838, pp. 287-301. Springer, Heidelberg (2009)
8. Falcone, Y., Fernandez, J.C., Mounier, L.: Enforcement monitoring wrt. the safety-progress classification of properties. In: Proceedings of the ACM Symposium on Applied Computing (SAC), pp. 593-600. ACM Press, New York (March 2009)
9. Fong, P.: Access control by tracking shallow execution history. In: Proceedings of the 2004 IEEE Symposium on Security and Privacy (May 2004)
10. Hamlen, K.W., Morrisett, G., Schneider, F.B.: Computability classes for enforcement mechanisms. ACM Transactions on Programming Languages and Systems (TOPLAS) 28(1), 175-205 (2006)
11. Lamport, L.: Proving the correctness of multiprocess programs. IEEE Transactions on Software Engineering 3(2), 125-143 (1977)
12. Ligatti, J., Bauer, L., Walker, D.: Edit automata: Enforcement mechanisms for run-time security policie. International Journal of Information Security (2004) (Pubitemid 40347198)
13. Ligatti, J., Bauer, L., Walker, D.: Enforcing non-safety security policies with program monitors. In: di Vimercati, S.d.C., Syverson, P.F., Gollmann, D. (eds.) ESORICS 2005. LNCS, vol. 3679, pp. 355-373. Springer, Heidelberg (2005)
14. Ligatti, J., Bauer, L., Walker, D.: Run-time enforcement of nonsafety policies. ACM Transactions on Information and System Security 12(3), 1-41 (2009)
15. Ligatti, J., Reddy, S.: A theory of runtime enforcement, with results. Tech. Rep. USF-CSE-SS-102809, University of South Florida (April 2010)
16. Schneider, F.B.: Enforceable security policies. Information and System Security 3(1), 30-50 (2000)
17. Syropoulos, A.: Mathematics of multisets. In: Calude, C.S., Pun, G., Rozenberg, G., Salomaa, A. (eds.) Multiset Processing. LNCS, vol. 2235, pp. 347-358. Springer, Heidelberg (2001)
18. Talhi, C., Tawbi, N., Debbabi, M.: Execution monitoring enforcement under memory-limitations constraints. Information and Computation 206(1), 158-184 (2008)