NDLI: Formal validation of automated policy refinement in the management of network security systems

Content Provider	Springer Nature Link
Author	Albuquerque, João Porto Krumm, Heiko Geus, Paulo Lício
Copyright Year	2010
Abstract	Policy hierarchies and automated policy refinement are powerful approaches to simplify administration of security services in complex network environments. A crucial issue for the practical use of these approaches is to ensure the validity of the policy hierarchy, i.e. since the policy sets for the lower levels are automatically derived from the abstract policies (defined by the modeller), we must be sure that the derived policies uphold the high-level ones. This paper builds upon previous work on Model-based Management, particularly on the Diagram of Abstract Subsystems approach, and goes further to propose a formal validation approach for the policy hierarchies yielded by the automated policy refinement process. We establish general validation conditions for a multi-layered policy model, i.e. necessary and sufficient conditions that a policy hierarchy must satisfy so that the lower-level policy sets are valid refinements of the higher-level policies according to the criteria of consistency and completeness. Relying upon the validation conditions and upon axioms about the model representativeness, two theorems are proved to ensure compliance between the resulting system behaviour and the abstract policies that are modelled.
Starting Page	99
Ending Page	125
Page Count	27
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	9
Issue Number	2
e-ISSN	16155270
Language	English
Publisher	Springer-Verlag
Publisher Date	2010-02-20
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Policy refinement Model-based management Formal validation Security policies Policy based management Network security Communications Engineering, Networks Management of Computing and Information Systems Coding and Information Theory Operating Systems Computer Communication Networks Data Encryption
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Rigorous automated network security management

Complete analysis of configuration rules to guarantee reliable network security policies

An overview of the verification of SET

Modeling contextual security policies

Ensuring security in depth based on heterogeneous network security technologies

A symbolic framework for multi-faceted security protocol analysis

Verifying multicast-based security protocols using the inductive method

Edit automata: enforcement mechanisms for run-time security policies

Game strategies in network security

Formal validation of automated policy refinement in the management of network security systems

Similar Documents

Rigorous automated network security management

Complete analysis of configuration rules to guarantee reliable network security policies

An overview of the verification of SET

Modeling contextual security policies

Ensuring security in depth based on heterogeneous network security technologies

A symbolic framework for multi-faceted security protocol analysis

Verifying multicast-based security protocols using the inductive method

Edit automata: enforcement mechanisms for run-time security policies

Game strategies in network security

Formal validation of automated policy refinement in the management of network security systems