Reaction Policy Model Based on Dynamic Organizations and Threat Context

Autrel, Fabien; Cuppens-Boulahia, Nora; Cuppens, Frédéric

doi:10.1007/978-3-642-03007-9_4

Cited by 8 publications

(4 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The contribution of our work may also benet policy-based reaction scenarios, such as those used by intrusion detection processes [4]. In these scenarios, a policy reconguration process must follow those detection mechanisms that identied a given attack or anomaly.…”

Section: Resultsmentioning

confidence: 99%

Dynamic deployment of context-aware access control policies for constrained security devices

Preda

Cuppens

Cuppens-Boulahia

et al. 2011

Journal of Systems and Software

Self Cite

View full text Add to dashboard Cite

Section: Resultsmentioning

confidence: 99%

Dynamic deployment of context-aware access control policies for constrained security devices

Preda

Cuppens

Cuppens-Boulahia

et al. 2011

Journal of Systems and Software

Self Cite

View full text Add to dashboard Cite

“…However, always applying such kind of rules is not desirable, as the enforcement of rules requires that the vehicle is in a specific context as well as a specific security event is active. To dynamically enforce these different sets of security policies, we call these policies as reaction policies [3]. In an on-board architecture, we need a system in which policy enforcement decisions are based on specific arguments in order to attain more fine grained enforcement of security policies.…”

Section: Motivation Example For Efficient Security Enforcementmentioning

confidence: 99%

Metric for Security Activities Assisted by Argumentative Logic

Bouyahia

Idrees

Cuppens-Boulahia

et al. 2015

Data Privacy Management, Autonomous Spontaneous Security, and Security Assurance

Self Cite

View full text Add to dashboard Cite

Abstract. Recent security concerns related to future embedded systems make enforcement of security requirements one of the most critical phases when designing such systems. This paper introduces an approach for efficient enforcement of security requirements based on argumentative logic, especially reasoning about activation or deactivation of different security mechanisms under certain functional and non-functional requirements. In this paper, the argumentative logic is used to reason about the rationale behind dynamic enforcement of security policies.

show abstract

“…The threat context first specifies the alert classification, and second triggers the activation and the mapping between alert attributes and concrete entities of the OrBAC model. In [4], an extension to the previous approach is presented. The novelty is the use of dynamic organizations to ease the definition and enforcement of more elaborated reaction requirements.…”

Section: Orbacmentioning

confidence: 99%

An Adaptive Mitigation Framework for Handling Suspicious Network Flows via MPLS Policies

2013

View full text Add to dashboard Cite

Abstract. As network attacks become more complex, defence strategies must provide means to handle more flexible and dynamic requirements. The Multiprotocol Label Switching (MPLS) standard is a promising method to properly handle suspicious flows participating in such network attacks. Tasks such as alert data extraction, and MPLS routers configuration present an entailment to activate the defence process. This paper introduces a novel framework to define, generate and implement mitigation policies on MPLS routers. The activation of such policies is triggered by the alerts and expressed using a high level formalism. An implementation of the approach is presented.

show abstract

Reaction Policy Model Based on Dynamic Organizations and Threat Context

Cited by 8 publications

References 12 publications

Dynamic deployment of context-aware access control policies for constrained security devices

Dynamic deployment of context-aware access control policies for constrained security devices

Metric for Security Activities Assisted by Argumentative Logic

An Adaptive Mitigation Framework for Handling Suspicious Network Flows via MPLS Policies

Contact Info

Product

Resources

About