.png){kind=icon}
返回
Security Policy Alignment: A Formal Approach
.png){kind=icon}
OA
AI
DOI：10.1109/JSYST.2012.2221933.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Security policy alignment concerns the matching of security policies specified at different levels in socio-technical systems, and delegated to different agents, technical and human. For example, the policy that sales data should not leave an organization is refined into policies on door locks, firewalls and employee behavior, and this refinement should be correct with respect to the original policy. Although alignment of security policies in socio-technical systems has been discussed in the literature, especially in relation to business goals, there has been no formal treatment of this topic so far in terms of consistency and completeness of policies. Wherever formal approaches are used in policy alignment, these are applied to well-defined technical access control scenarios instead. Therefore, we aim at formalizing security policy alignment for complex socio-technical systems in this paper, and our formalization is based on predicates over sequences of actions. We discuss how this formalization provides the foundations for existing and future methods for finding security weaknesses induced by misalignment of policies in socio-technical systems.
Keyword:
Attack trees
security logics
security policies
security policy alignment
security policy refinement
socio-technical systems
system models
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
I
IF:
2.4
论文数:
4.5K
被引数:
387
机构
引用论文
DIALYSIS AND NON-NEPHROLOGY HEALTHCARE COSTS: MEDICARE AND PRIVATE PAYER EFFECTS OVER TIME透析与非肾脏病学医疗成本：随时间变化的医疗保险和私人支付方影响
.png){kind=icon}
PREAI
分享收藏CONTRACEPTION, SEXUAL DYSFUNCTION, AND REPRODUCTIVE HEALTH IN WOMEN WITH KIDNEY DISEASE: A CROSS-SECTIONAL SURVEY STUDY OF NEPHROLOGISTS IN THE UNITED STATES避孕、性功能障碍和肾脏病女性患者的生殖健康：美国肾脏病医师的横断面调查研究的现状
PREAI
分享收藏分享收藏分享收藏
查看更多内容