Applying the layered decision model to the design of language-based security systems

Safeguarding practices for networked systems involves decisions in at least three areas: identification of welldefined security policies, selection of cost-effective defense strategies, and implementation of real-time defense tactics. These practices also apply to the language-based defense mechanism for a software system, which is a subset of a networked security system. Although much research has been conducted to develop language-based defense mechanisms to improve the security of software systems, the most comprehensive requirement is still the enforcement of security policies through the end-to-end control mechanism. However, the security enforcement cannot be easily achieved without a comprehensive decision model that integrates decisions about security policies, cost-effective defense strategies, and real-time defense tactics into a single, efficient framework to guide security experts in designing, developing and deploying language-based defense mechanisms in a software system...

• Type: Conference
• Year: 2006
• Where: IRI
• Authors: Huaqiang Wei, Jim Alves-Foss
• Keywords: Information Retrieval, IRI 2006, Language-based Defense Mechanisms, Security, Software Systems