Title:
|
Management of exceptions on access control policies
|
Author:
|
García Alfaro, Joaquín; Cuppens, Frederic; Cuppens, Nora
|
Other authors:
|
Universitat Oberta de Catalunya. K-ryptography and Information Security for Open Networks (KISON) |
Abstract:
|
Peer-reviewed |
Abstract:
|
The use of languages based on positive or negative expressiveness is very common for the deployment of security policies (i.e., deployment of permissions and prohibitions on firewalls through single-handed positive or negative condition attributes). Although these languages may allow us to specify any policy, the single use of positive or negative statements alone leads to complex configurations when excluding some specific cases of general rules that should always apply. In this paper we survey such a management and study existing solutions, such as ordering of rules and segmentation of condition attributes, in order to settle this lack of expressiveness. |
Subject(s):
|
-Computer networks -- Security measures -Computer security -Firewalls (Computer security) -Ordinadors, Xarxes d' -- Mesures de seguretat -Informàtica -- Mesures de seguretat -Tallafocs (Seguretat informàtica) -Ordenadores, Redes de -- Medidas de seguridad -Informática -- Medidas de seguridad -Cortafuegos (Seguridad informática) |
Rights:
|
https://creativecommons.org/licenses/by-nc-nd/2.5/es/ |
Document type:
|
Conference Object |
Share:
|
|