Automata-Based Approach to Design and Analyze Security Policies

TitreAutomata-Based Approach to Design and Analyze Security Policies
Publication TypeConference Paper
Year of Publication2014
AuthorsKrombi, W, Erradi, M, Khoumsi, A
EditorMiri, A, Hengartner, U, Huang, NF, Josang, A, GarciaAlfaro, J
Conference Name2014 TWELFTH ANNUAL INTERNATIONAL CONFERENCE ON PRIVACY, SECURITY AND TRUST (PST)
ISBN Number978-1-4799-3503-1
Abstract

Information systems must be controlled by security policies to protect them from undue accesses. Security policies are often designed by rules expressed using informal text, which implies ambiguities and inconsistencies in security rules. Our objective in this paper is to develop a formal approach to design and analyze security policies. We propose a procedure that synthesizes an automaton which implements a given security policy. Our automata-based approach can be a common basis to analyze several aspects of security policies. We use our automata-based approach to develop three analysis procedures to: verify completeness of a security policy, detect anomalies in a security policy, and detect functional discrepancies between several implementations of a security policy. We illustrate our approach using examples of security policies for a firewall.

Revues: 

Partenaires

Localisation


Location map

Suivez-nous sur

  

Contactez-nous

ENSIAS

Avenue Mohammed Ben Abdallah Regragui, Madinat Al Irfane, BP 713, Agdal Rabat, Maroc

Résultat de recherche d'images pour "icone fax" Télécopie : (+212) 5 37 77 72 30

    Compteur de visiteurs:280,166
    Education - This is a contributing Drupal Theme
    Design by WeebPal.