ESORICS
2003
Springer
14 years 6 months ago
2003
Springer
In this paper, we describe a novel approach to policy-based intrusion detection. The model we propose checks legality of information flows between objects in the system, according...
WETICE
2003
IEEE
14 years 6 months ago
2003
IEEE
Large scale distributed applications such as electronic commerce and online marketplaces combine network access with multiple storage and computational elements. The distributed r...
ACSAC
2003
IEEE
14 years 6 months ago
2003
IEEE
The IPsec protocol provides a mechanism to enforce a range of security services for both confidentiality and integrity, enabling secure transmission of information across networks...
ISCC
2005
IEEE
14 years 6 months ago
2005
IEEE
Network firewalls remain the forefront defense for most computer systems. These critical devices filter traffic by comparing arriving packets to a list of rules, or security po...
CNSR
2005
IEEE
14 years 6 months ago
2005
IEEE
This paper presents an approach for managing access to services over presence-based communications based on the context of the situation. This paper addresses two technical challe...
PLDI
2006
ACM
14 years 6 months ago
2006
ACM
Adding a sound information flow security policy to an existing program is a difficult task that requires major analysis of and changes to the program. In this paper we show how ...
NSPW
2006
ACM
14 years 6 months ago
2006
ACM
This paper details a true and striking paradigm shift: the use of E-Prime for (at least) user-centered security, organizational/enterprise security policies and informal security ...
IEEEARES
2007
IEEE
14 years 7 months ago
2007
IEEE
The most important part of a firewall configuration process is the implementation of a security policy by a security administrator. However, this security policy is not designed b...
HICSS
2007
IEEE
14 years 7 months ago
2007
IEEE
The literature agrees that the major threat to IS security is constituted by careless employees who do not comply with organizations’ IS security policies and procedures. To add...
ICST
2008
IEEE
14 years 7 months ago
2008
IEEE
If access control policy decision points are not neatly separated from the business logic of a system, the evolution of a security policy likely leads to the necessity of changing...