2014
Contribution to book  Restricted

Quantitative Evaluation of Enforcement Strategies

Ciancia V., Martinelli F., Matteucci I., Morisset C.

quantitative process algebra  Controller Operators  Quantititve Security  D.4.6 Security and Protection  semiring  enforcement mechanisms  C-semirings 

A security enforcement mechanism runs in parallel with a system to check and modify its run-time behaviour, so that it satisfies some security policy. For each policy, several enforcement strategies are possible, usually reflecting trade-offs one has to make to satisfy the policy. To evaluate them, multiple dimensions, such as security, cost of implementation, or cost of attack, must be taken into account. We propose a formal framework for the quantification of enforcement strategies, extending the notion of controller processes (mimicking the well-known edit automata) with weights on transitions, valued in a semiring.

Source: Foundations and Practice of Security. 6th International Symposium. Revised Selected Papers, edited by Jean Luc Danger, Mourad Debbabi, Jean-Yves Marion, Joaquin Garcia-Alfaro, Nur Zincir Heywood, pp. 178–186, 2014


Metrics



Back to previous page
BibTeX entry
@inbook{oai:it.cnr:prodotti:279301,
	title = {Quantitative Evaluation of Enforcement Strategies},
	author = {Ciancia V. and Martinelli F. and Matteucci I. and Morisset C.},
	doi = {10.1007/978-3-319-05302-8_11},
	booktitle = {Foundations and Practice of Security. 6th International Symposium. Revised Selected Papers, edited by Jean Luc Danger, Mourad Debbabi, Jean-Yves Marion, Joaquin Garcia-Alfaro, Nur Zincir Heywood, pp. 178–186, 2014},
	year = {2014}
}