Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07)最新文献_第3页

Data-Purpose Algebra: Modeling Data Usage Policies 数据目的代数:数据使用策略建模

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.14

C. Hanson, Tim Berners-Lee, Lalana Kagal, G. Sussman, D. Weitzner

引用次数: 42

Web Services Security: Challenges and Techniques Web服务安全:挑战和技术

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.50

A. Singhal

引用次数: 16

Adaptive Web Data Extraction Policies 自适应Web数据提取策略

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.4

G. Fiumara, M. Marchi, A. Provetti

引用次数: 2

Distributed Enforcement of Unlinkability Policies: Looking Beyond the Chinese Wall 不可链接策略的分布式执行:超越中国墙

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.16

Apu Kapadia, P. Naldurg, R. Campbell

{"title":"Distributed Enforcement of Unlinkability Policies: Looking Beyond the Chinese Wall","authors":"Apu Kapadia, P. Naldurg, R. Campbell","doi":"10.1109/POLICY.2007.16","DOIUrl":"https://doi.org/10.1109/POLICY.2007.16","url":null,"abstract":"We present a discretionary access control framework that can be used to control a principal's ability to link information from two or more audit records and compromise a user's privacy. While the traditional Chinese Wall (CW) access control model is sufficient to enforce this type of unlinkability, in distributed environments CW is inefficient because its semantics requires knowledge of a user's access history. We propose a restricted version of the CW model in which policies are easy to enforce in a decentralized manner without the need for an access history. Our architecture analyzes system policies for potential linkability conflicts. Users can identify specific threats to their privacy, typically in terms of trusted and untrusted roles in the context of RBAC (role based access control), following which the system attaches automatically generated policy constraints to the audit records. When these constraints are enforced appropriately, they implement unlinkability policies that are provably secure and precise for a fixed protection state. We extend the model with a versioning scheme that can handle evolving protection state, including changing roles and permissions, trading precision to maintain the security of deployed policies.","PeriodicalId":240693,"journal":{"name":"Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07)","volume":"22 2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115759129","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Dynamic Adaptation of Policies in Data Center Management 数据中心管理中策略的动态适配

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.18

Wael Hosny Fouad Aly, H. Lutfiyya

引用次数: 8

An Automated Framework for Validating Firewall Policy Enforcement 验证防火墙策略实施的自动化框架

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.5

A. El-Atawy, T. Samak, Zein Wali, E. Al-Shaer, F. Lin, Christopher Pham, Sheng Li

{"title":"An Automated Framework for Validating Firewall Policy Enforcement","authors":"A. El-Atawy, T. Samak, Zein Wali, E. Al-Shaer, F. Lin, Christopher Pham, Sheng Li","doi":"10.1109/POLICY.2007.5","DOIUrl":"https://doi.org/10.1109/POLICY.2007.5","url":null,"abstract":"The implementation of network security devices such as firewalls and IDSs are constantly being improved to accommodate higher security and performance standards. Using reliable and yet practical techniques for testing the functionality of firewall devices particularly after new filtering implementation or optimization becomes necessary to assure required security. Generating random traffic to test the functionality of firewall matching is inefficient and inaccurate as it requires an exponential number of test cases for a reasonable coverage. In addition, in most cases the policies used during testing are limited and manually generated representing fixed policy profiles. In this paper, we present a framework for automatic testing of the firewall policy enforcement or implementation using efficient random traffic and policy generation techniques. Our framework is a two-stage architecture that provides a satisfying coverage of the firewall operational states. A large variety of policies are randomly generated according to custom profiles and also based on the grammar of the access control list. Testing packets are then generated intelligently and proportional to the critical regions of the generated policies to validate the firewall enforcement for such policies. We describe our implementation of the framework based on Cisco IOS, which includes the policy generation, test cases generation, capturing and analyzing firewall out put, and creating detailed test reports. Our evaluation results show that the automated security testing is not only achievable but it also offers a dramatically higher degree of confidence than random or manual testing.","PeriodicalId":240693,"journal":{"name":"Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07)","volume":"148 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115598571","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 46

XACML-Based Composition Policies for Ambient Networks 基于xacml的环境网络组合策略

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.52

C. Kamienski, J. Fidalgo, R. Dantas, D. Sadok, B. Ohlman

引用次数: 11

Overriding of Access Control in XACML XACML中访问控制的重写

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.31

Ja'far Alqatawna, E. Rissanen, B. S. Firozabadi

引用次数: 28

CoRaL--Policy Language and Reasoning Techniques for Spectrum Policies CoRaL——频谱政策的政策语言和推理技术

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.13

D. Elenius, G. Denker, Mark-Oliver Stehr, R. Senanayake, C. Talcott, D. Wilkins

引用次数: 44

Hybrid Multi-module Security Policy Verification 混合多模块安全策略验证

Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07) Pub Date : 2007-06-13 DOI: 10.1109/POLICY.2007.25

Igor Kotenko, Olga Chervatuk, E. Sidelnikova, A. Tishkov

引用次数: 0