NDLI: Execution monitoring enforcement for limited-memory systems

Please wait, while we are loading the content...

Digital identity management and protection

From concept to commercialiazed product: the challenges of privacy technologies

Computing trust from revision history

A constraint based role based access control in the SECTET a model-driven approach

Towards a precise semantics for authenticity and trust

Dynamic inference control in privacy preference enforcement

Is workplace surveillance legal in Canada?

Using web service enhancements to bridge business trust relationships

Achieving privacy and security in radio frequency identification

Towards reliable trust establishment in grid: a pre-evaluating set based bias-tuned method for dishonest feedback filtering

Virtual identities in authentication and authorization scenarios

Intelligent virus detection on mobile devices

Defining the security required for WAP based mobile ticket sales

Topological analysis of network attack vulnerability

Deep packet inspection comes to the desktop

Analyzing trust in technology strategies

Protected data paths: delivering sensitive data via untrusted proxies

An improved familiarity measurement for formalization of trust in e-commerce based multiagent systems

Privacy policy enforcement in enterprises with identity management solutions

Bridging the gap: software specification meets intrusion detector

An incentive compatible reputation mechanism for ubiquitous computing environments

Privacy enhanced personalization in e-learning

A trust framework model for situational contexts

AA-RR: working with authentication and authorization infrastructures

Towards an MDA-oriented UML profile for critical infrastructure modeling

The quantum nature of cryptography: problems of public-key cryptography and the prospect of quantum key distribution

Paths to creativity in security careers

Label-based access control (LBAC) in DB2 LUW

Requirements of federated trust management for service-oriented architectures

Architecture-based refinements for secure computer systems design

Trust and security in spatial messaging: FoxyTag, the speed camera case study

Formal consistency verification between BPEL process and privacy policy

Phishing defense against IDN address spoofing attacks

Alert correlation survey: framework and techniques

Security hardening of open source software

Trust-based contextual information filtering

Persona concept for web-based identity management

Using an improved C4.5 for imbalanced dataset of intrusion

Is privacy an attainable goal?: a review of the privacy rights dilemma

Role-based access control: past, present and future

Trust modelling for online transactions: a phishing scenario

A new fair non-repudiation protocol for secure negotiation and contract signing

Modeling trust using transactional, numerical units

A privacy-preserving UBICOMP architecture

Using self-organizing maps to build an attack map for forensic analysis

Execution monitoring enforcement for limited-memory systems

Constraint based role based access control (CRBAC) for restricted administrative delegation constraints in the SECTET

Trust determination in ad hoc networks

Off-line verification of one-time ID in distributed environment

Secure algorithm for finding K nearest neighbors in distributed databases

Exploiting a buffer overflow using metasploit framework

A comparison of reputation-based trust systems

Detecting low-profile scans in TCP anomaly event data

Building online trust through privacy policies

Query rewriting for detection of privacy violation through inferencing

An efficient traitor tracing scheme based on MDS code

Embedding verifiable information flow analysis

Security crosscutting concerns and AspectJ

MTRMS: mutual-trust-based reputation management system in community-based peer-to-peer environment

Chinese text watermarking based on occlusive components

Design and implementation of a behavioral difference analyzer for network intrusion detection

Ontario healthcare privacy act: compliant ad hoc healthcare applications

Approximate autoregressive modeling for network attack detection

Privacy in video surveilled areas

Behavior analysis through reputation propagation in a multi-context environment

Privacy-preserving OLAP based on output perturbation across multiple sites

Towards a model for risk and consent management of personal health information

User-credential based role mapping in multi-domain environment

Towards believing answers from cyber-infrastructure-based applications

Mobile access control policy for healthcare applications with XACML

A framework ensuring privacy in a distributed environment

A concept of intelligent biometric-based early detection and warning system

Privacy, traceability, and anonymity for content protection

Mobile healthcare applications: a study of access control

An early release heuristic for k-anonymization

The 'how' and 'why' of persistent information security

Cryptanalysis and improvement on Yang-Shieh authentication schemes

Considering role-based conflicts of interest in analyzing and designing e-health systems with goal-oriented methodologies

From stakeholder goals to product features: towards a role-based variability framework with decision boundary

Execution monitoring enforcement for limited-memory systems

Content Provider	ACM Digital Library
Author	Talhi, Chamseddine Debbabi, Mourad Tawbi, Nadia
Abstract	Recently, attention has been given to formally characterize security policies that are enforceable by different kinds of security mechanisms. Since execution monitoring (EM) is a ubiquitous technique for enforcing security policies, this class of enforcement mechanisms has attracted the attention of the majority of authors characterizing security enforcement. A very important research problem is the characterization of security policies that are enforceable by execution monitors constrained by memory limitations. This paper contributes to give more precise answers to this research problem. To represent execution monitors constrained by memory limitations, we introduce a new class of automata that we call Bounded History Automata. Characterizing memory limitations gives rise to a precise taxonomy of security policies enforceable under such constraints. This work is in the same line as the research work advanced by Schneider [31], Ligatti et. al [1, 21] and Fong [12] on security enforcement. Our main contribution consists in (1) instantiating Fong's abstraction idea to deal with memory-limitations, (2) defining Bounded History Automata by applying our abstraction to both security automata and edit automata [1], and (3) Reasoning about the enforcement power of bounded history automata by investigating the enforcement of locally testable properties; a well studied class of languages that are recognizable by investigating "local" information. Our approach gives rise to a realistic evaluation of the enforcement power of execution monitoring. This evaluation is based on bounding the memory size used by the monitor to save execution history, and identifying the security policies enforceable under such constraint.
Starting Page	1
Ending Page	12
Page Count	12
File Format	PDF
ISBN	1595936041
DOI	10.1145/1501434.1501480
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2006-10-30
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Enforcement mechanisms Edit automata Bounded history automata Execution monitoring Security policies Locally-testable properties
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in