A Framework for Translating a High Level Security Policy into Low Level Security Mechanisms
By: Ahmed Hassan and Waleed Bahgat
Open Access
|Jun 2011References
- BARTAL, Y.—MAYER, A.—NISSIM, K.—WOOL, A.: Firmato: a Novel Firewall Management Toolkit, IEEE Symposium on Security and Privacy, 1999, pp. 17-31.
- MAYER, A.—WOOL, A.—ZISKIND, E. Fang: a Firewall Analysis Engine : In Proc. of the IEEE Symposium on Security and Privacy, 2000.
- HASSAN, A.—HUDEC, L.: Role Based Network Security Model: A Forward Step Towards Firewall Management, In Workshop on Security of Information Technologies, Algiers, 2003.
- El KALAM, A. A.—El BAIDA, R.—BALBIANI, P.—BENFERHAT, S.—CUPPENS, F.—DESWARTE, Y.—MIEGE, A.—SAUREL, C.—TROUESSIN, G.: Organization Based Access Control, In Proc. of 4IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY 2003), Lake Come, Italy, June 2003, pp. 120-134.
- GHORBEL-TALBI, M.—CUPPENS, F.—CUPPENS, N.—BOULAHIA, A.: Managing Delegation in Access Control Models, 15International Conference on Advanced Computing and Communication (ADCOM'07), Guwahati, Inde, December 2007.
- MIEGE, A.: Definition of a Formal Framework for Specifying Security Policies. The Or-BAC Model and Extensions, PhD thesis, Ecole Nationale Superieure des Telecommunications, 2005.
- CUPPENS, F.—CUPPENS, N. SANS, T.—MIEGE, A.: A Formal Approach to Specify and Deploy a Network Security Policy, In Proc. of the 2Workshop on Formal Aspects in Security and Trust (FAST), Toulouse, France, August 2004.
- KANGASLUOMA, M.: Policy Specification Languages, Report of Helsinki University of Technology, Helsinki, Finland, November 1999.
- JOHNSON, M.—CHANG, P.—JEFFERS, R.—BRADSHAW, J.: KAoS Semantic Policy and Domain Services: an Application of DAML to Web Services-Based Grid Architectures, In Proc. of the AAMAS 03 Workshop on Web Services and Agent-Based Engineering, Melbourne, Australia, July 2003.
- The Web Ontology Language (OWL)
- HOAGLAND, J.: Security Policy Specification Using a Graphical Approach, Technical Report CSE-98-3, University of California, Davis Department of Computer Science, 1998.
- BLAZE, M.—FEIGENBAUM, J.—IOANNIDIS, J.—KEROMYTIS, A. D.: In Secure Internet Programming: Security Issues for Mobile and Distributed Objects, Springer-Verlag, New York, NY, USA, 1999, pp. 185-210.
- BLAZE, M.—FEIGENBAUM, J.—KEROMYTIS, A.: Keynote: Trust Management for Publc-Key Infrastructures, In Proc. of the Security Protocls International Workshop, Cambridge, England, Springer-Verlag LNCS, April 1998, pp. 59-63.
- HINE, J.—YAO, W.—BACON, J.—MOODY, K.: An Architecture for Distributed OASIS Services, In Proc. of the Middleware 2000, New York, USA, Lecture Notes in Computer Science, Springer-Verlag, April 2000, pp. 107-123.
- DAMIANOU, N.: A Policy Framework for Management of Distributed Systems, PhD thesis, University of London, 2002.
- LU, F.: Enforcing Ponder Policies using Kava, Master thesis, Victoria University of Wellington, 2004.
DOI: https://doi.org/10.2478/v10187-010-0003-x | Journal eISSN: 1339-309X (formerly 1335-3632) | Journal ISSN: 1335-3632
Language: English
Page range: 20 - 28
Published on: Jun 7, 2011
Published by: Slovak University of Technology in Bratislava
In partnership with: Paradigm Publishing Services
Related subjects:
© 2011 Ahmed Hassan, Waleed Bahgat, published by Slovak University of Technology in Bratislava
This work is licensed under the Creative Commons License.