Logic-based Methodology to Help Security Architects in Eliciting High-Level Network Security Requirements - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2019

Logic-based Methodology to Help Security Architects in Eliciting High-Level Network Security Requirements

Résumé

In this paper, we propose a security methodology that automates the process of security zone specification and high-level network security requirements elicitation. We define a set of formalized rules derived from the principles of complete mediation, least privileges and the Clark-Wilson lite formal model making our approach traceable and verifiable. We implemented the methodology in Answer Set Programming to automatically compute an optimal network security zone model considering the cost of the security solution. A use case study of an e-commerce enterprise network infrastructure illustrates our methodology.
Fichier principal
Vignette du fichier
laborde_24856.pdf (752.58 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02456750 , version 1 (27-01-2020)

Identifiants

  • HAL Id : hal-02456750 , version 1
  • OATAO : 24856

Citer

Romain Laborde, Sravani Teja Bulusu, Ahmad Samer Wazan, François Barrère, Abdelmalek Benzekri. Logic-based Methodology to Help Security Architects in Eliciting High-Level Network Security Requirements. 34th ACM/SIGAPP Symposium on Applied Computing (SAC 2019), Apr 2019, Limassol, Cyprus. pp.1610-1619. ⟨hal-02456750⟩
50 Consultations
148 Téléchargements

Partager

Gmail Facebook X LinkedIn More