637 search results - page 3 / 128 » The Case for Abstracting Security Policies |
ISF
2007
13 years 8 months ago
2007
Abstract This paper addresses the specification of a security policy ontology framework to mediate security policies between virtual organizations (VO) and real organizations (RO)....
ICST
2009
IEEE
14 years 3 months ago
2009
IEEE
In this paper, we consider typical applications in which the business logic is separated from the access control logic, implemented in an independent component, called the Policy ...
CSFW
2005
IEEE
14 years 2 months ago
2005
IEEE
Modelling security policies requires means to specify permissions and prohibitions. However, this is generally not sufficient to express security properties such as availability ...
ISSA
2008
13 years 10 months ago
2008
Information Security awareness initiatives are seen as critical to any information security programme. But, how do we determine the effectiveness of these awareness initiatives? W...
PLDI
2009
ACM
14 years 3 months ago
2009
ACM
Decentralized information flow control (DIFC) is a promising model for writing programs with powerful, end-to-end security guarantees. Current DIFC systems that run on commodity ...