SEC
2008
14 years 2 months ago
2008
Abstract. In recent security architectures, it is possible that the security policy is not evaluated in a centralized way but requires negotiation between the subject who is reques...
ISSRE
2007
IEEE
14 years 2 months ago
2007
IEEE
While important efforts are dedicated to system functional testing, very few works study how to test specifically security mechanisms, implementing a security policy. This paper i...
DEON
2008
Springer
14 years 2 months ago
2008
Springer
The security policy of an information system may include a wide range of different requirements. The literature has primarily focused on access and information flow control require...
LISA
2007
14 years 3 months ago
2007
Packet filtering firewall is one of the most important mechanisms used by corporations to enforce their security policy. Recent years have seen a lot of research in the area of ...
ESORICS
2000
Springer
14 years 4 months ago
2000
Springer
Abstract. We present a generic formal security model for operating systems of multiapplicative smart cards. The model formalizes the main security aspects of secrecy, integrity, se...
B
2007
Springer
14 years 4 months ago
2007
Springer
Abstract. In the area of networks, a common method to enforce a security policy expressed in a high-level language is based on an ad-hoc and manual rewriting process [24]. We argue...
ACSAC
1996
IEEE
14 years 5 months ago
1996
IEEE
In this paper we describe the method used to develop a gateway capable of meeting the ITSEC E4 requirements. The security policy was formally modelled and proven consistent with t...
SP
1997
IEEE
14 years 5 months ago
1997
IEEE
This paper discusses the development of a methodology for reasoning about properties of security policies. We view a security policy as a special case of regulation which specifi...
NOMS
2000
IEEE
14 years 5 months ago
2000
IEEE
Using IP-based Virtual Private Network (IP-VPN) technology, a company can establish its virtual private network over public networks. Recently, IP-VPN emerges as one of main techn...
ACSAC
2000
IEEE
14 years 5 months ago
2000
IEEE
Cooperative frameworks for intrusion detection and response exemplify a key area of today’s computer research: automating defenses against malicious attacks that increasingly ar...