Applied Dynamic Policy Selection

Florian Reimair, Bernd Prünster, Andreas Reiter, Christian Ertler

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband › Begutachtung

Abstract

Cloud key services are prominent targets for attacks. In fact, every service guarding sensitive data uses a policy system to do so. As of today, such policies are mostly static. However, as system environments change and attacks grow more sophisticated, such static policies cannot always sufficiently cope with attacks and may even unnecessarily hinder the legitimate user. We believe that more fine-grained and reactive protection systems are needed to meet modern security requirements. We propose a concept to separate the concerns of policy enforcement and the policies themselves as a basis for more flexible and dynamic policy enforcement. With policies no longer interfering with a system's business logic, we can introduce strategies and actions which preselect rules based on system information for the policy enforcement to use. In order to understand the characteristics and capabilities of the proposed concept, we implemented two case studies based on CrySIL and XACML. We show that our concept can can be gradually integrated with existing systems while at the same time easing maintenance of policy sets. Furthermore, it enables policy sharing and joint definition and refinement of strategies, actions, and security rules, resulting in powerful security policies at minimal cost. All in all, our solution fosters deployment of reactive security systems.
Originalspracheenglisch
Titel2016 IEEE Conference on Communications and Network Security (CNS 2016)
Seitenumfang9
ISBN (elektronisch)978-1-5090-3065-1
DOIs
PublikationsstatusVeröffentlicht - 19 Okt. 2016
Veranstaltung2016 IEEE Conference on Communications and Network Security: IEEE CNS 2016 - Philadelphia, USA / Vereinigte Staaten
Dauer: 17 Okt. 2016 → 19 Okt. 2016

Konferenz

Konferenz2016 IEEE Conference on Communications and Network Security
Land/GebietUSA / Vereinigte Staaten
OrtPhiladelphia
Zeitraum17/10/16 → 19/10/16

ASJC Scopus subject areas

  • Informatik (sonstige)

Zugriff auf Dokument

Fingerprint

Untersuchen Sie die Forschungsthemen von „Applied Dynamic Policy Selection“. Zusammen bilden sie einen einzigartigen Fingerprint.
Vollständigen Fingerprint anzeigen

  • A-SIT - Zentrum für sichere Informationstechnologie Austria

    Stranacher, K. (Teilnehmer (Co-Investigator)), Dominikus, S. (Teilnehmer (Co-Investigator)), Leitold, H. (Teilnehmer (Co-Investigator)), Marsalek, A. (Teilnehmer (Co-Investigator)), Teufl, P. (Teilnehmer (Co-Investigator)), Bauer, W. (Teilnehmer (Co-Investigator)), Aigner, M. J. (Teilnehmer (Co-Investigator)), Rössler, T. (Teilnehmer (Co-Investigator)), Neuherz, E. (Teilnehmer (Co-Investigator)), Dietrich, K. (Teilnehmer (Co-Investigator)), Zefferer, T. (Teilnehmer (Co-Investigator)), Mangard, S. (Teilnehmer (Co-Investigator)), Payer, U. (Teilnehmer (Co-Investigator)), Orthacker, C. (Teilnehmer (Co-Investigator)), Lipp, P. (Teilnehmer (Co-Investigator)), Reiter, A. (Teilnehmer (Co-Investigator)), Knall, T. (Teilnehmer (Co-Investigator)), Bratko, H. (Teilnehmer (Co-Investigator)), Bonato, M. (Teilnehmer (Co-Investigator)), Suzic, B. (Teilnehmer (Co-Investigator)), Zwattendorfer, B. (Teilnehmer (Co-Investigator)), Kreuzhuber, S. (Teilnehmer (Co-Investigator)), Oswald, M. E. (Teilnehmer (Co-Investigator)), Tauber, A. (Teilnehmer (Co-Investigator)), Posch, R. (Projektleiter (Principal Investigator)), Bratko, D. (Teilnehmer (Co-Investigator)), Feichtner, J. (Teilnehmer (Co-Investigator)), Ivkovic, M. (Teilnehmer (Co-Investigator)), Reimair, F. (Teilnehmer (Co-Investigator)), Wolkerstorfer, J. (Teilnehmer (Co-Investigator)) & Scheibelhofer, K. (Teilnehmer (Co-Investigator))

    21/05/99 → 31/12/24

    Projekt: Arbeitsgebiet

Dieses zitieren