Reaction policy model based on dynamic organizations and threat context - Archive ouverte HAL Accéder directement au contenu
Chapitre D'ouvrage Année : 2009

Reaction policy model based on dynamic organizations and threat context

Résumé

The tasks a system administrator must fulfill become more and more complex as information systems increase in complexity and connectivity. More specifically, the problem of the expression and update of security requirements is central. Formal models designed to express security policies have proved to be necessary since they provide non ambiguous semantics to analyze them. However, such models as RBAC or OrBAC are not used to express reaction requirements which specify the reaction policy to enforce when intrusions are detected. We present in this article an extension of the OrBAC model by defining dynamic organizations and threat contexts to enable the expression and enforcement of reaction requirements.

Dates et versions

hal-00426462 , version 1 (26-10-2009)

Identifiants

Citer

Fabien Autrel, Frédéric Cuppens, Nora Cuppens-Boulahia. Reaction policy model based on dynamic organizations and threat context. 23rd Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec'09), Springer, pp.49-64, 2009, ⟨10.1007/978-3-642-03007-9_4⟩. ⟨hal-00426462⟩
111 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More