A trustworthy usage control enforcement framework

Proceedings of the 2011 6th International Conference on Availability, Reliability and Security, ARES 2011

Volumn , Issue , 2011, Pages 230-235

  Neisse, Ricardo ^a   Pretschner, Alexander ^b   Di Giacomo, Valentina ^c  

^a Fraunhofer IESE ^*  (Germany)

^b KARLSRUHE INSTITUTE OF TECHNOLOGY   (Germany)

^c Engineering   (Italy)

Author keywords

Data usage control

Indexed keywords

AUTOMATIC CONVERSION; DATA USAGE; ENFORCEMENT MECHANISMS; ENTERPRISE SERVICE BUS; GENERICITY; LEVELS OF ABSTRACTION; PERFORMANCE ANALYSIS; POLICY LANGUAGE; TRUSTED COMPUTING TECHNOLOGY; USAGE CONTROL;

DATA HANDLING;

EID: 80455140355     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2011.40     Document Type: Conference Paper

References (18)

1. MASTER, "Managing assurance, security, and trust for services," Available at: http://www.master-fp7.eu.
2. M. Hilty, A. Pretschner, D. Basin, C. Schaefer, and T. Walter, "A policy language for distributed usage control," in Computer Security ESORICS 2007, ser. Lecture Notes in Computer Science, 2007, vol. 4734.
3. A. Pretschner, M. Hilty, D. Basin, C. Schaefer, and T. Walter, "Mechanisms for usage control," in Proceedings of the 2008 ACM symposium on Information, computer and communications security (ASIACCS), 2008.
4. R. Koymans, J. Vytopil, and W. P. de Roever, "Real-time programming and asynchronous message passing," in Proceedings of the second annual ACM symposium on Principles of distributed computing (PODC). New York, NY, USA: ACM, 1983.
5. F. Laroussinie, N. Markey, and P. Schnoebelen, "Temporal logic with forgettable past," in Proceedings of the 17th Annual IEEE Symposium on Logic in Computer Science (LICS). Washington, DC, USA: IEEE Computer Society, 2002.
6. C. Dax, F. Klaedtke, and M. Lange, "On regular temporal logics with past," in Proceedings of the 36th Internatilonal Collogquium on Automata, Languages and Programming: Part II (ICALP). Berlin, Heidelberg: Springer-Verlag, 2009.
7. P. O. Meredith, D. Jin, D. Griffith, F. Chen, and G. Rosu, "An overview of the mop runtime verification framework," Int. J. Softw. Tools for Technol. Transf., 2011, available at: http://fsl.cs.uiuc.edu.
8. E. Rissanen, "extensible access control markup language v3.0," Available at: http://docs.oasis-open.org, 2010.
9. K. Havelund and G. Rosu, "Efficient monitoring of safety properties," Int. J. Softw. Tools for Technol. Transf., vol. 6, Aug 2004.
10. A. Pretschner, J. Ruesch, C. Schaefer, and T. Walter, "Formal analyses of usage control policies," in International Conference on Availability, Reliability and Security (ARES), 2009.
11. R. Neisse, D. Holling, and A. Pretschner, "Implementing trust in cloud infrastructures," in 11th IEEE/ACM International Conference on Cluster, Cloud and Grid Computing, CCGrid 2011 (to appear), 2011, available at: http://zvi.ipd.kit.edu.
12. P. Kumari, A. Pretschner, J. Peschla, and J. Kuhn, "Distributed data usage control for web applications: A social network implementation," Proceedings 1st ACM Conference on Data and Application Security and Privacy (CODASPY), 2011, available at: http://zvi.ipd.kit.edu.
13. A. Pretschner, M. Buechler, M. Harvan, C. Schaefer, and T. Walter, "Usage control enforcement with data flow tracking for x11," in Proc. 5th Intl. Workshop on Security and Trust Management, 2009, pp. 124-137.
14. "Apache servicemix," Available at: http://servicemix.apache. org, 2011.
15. N. Provos, "Improving host security with system call policies," in In Proceedings of the 12th Usenix Security Symposium, 2003.
16. K. Twidle, E. Lupu, N. Dulay, and M. Sloman, "Ponder2- a policy environment for autonomous pervasive systems," in IEEE Workshop on Policies for Distributed Systems and Network (POLICY), June 2008, pp. 245-246.
17. J. Park and R. Sandhu, "The uconabc usage control model," ACM Trans. Inf. Syst. Secur., 2004.
18. G. Gheorghe, S. Neuhaus, and B. Crispo, "xesb: an enterprise service bus for access and usage control policy enforcement," in In the proceedings of the IFIPTM10, 2010.