TY  - CONF
AU  - Brucker, Achim D.
AU  - Petritsch, Helmut
PY  - 2011/jun/
TI  - A Framework for Managing and Analyzing Changes of Security Policies
BT  - IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY)
SP  - 105
EP  - 112
PB  - IEEE Computer Society
CY  - Los Alamitos, CA, USA
KW  - security policies, versioning, runtime monitoring
N2  - Modern enterprise systems need to comply to complex security policies. Due to legal regulations such as Basel II or HIPAA, the enforcement of these security policies needs to be carefully monitored and analyzed. The monitoring of complex and often dynamic access control requirements results in a vast amount of information that needs to be analyzed both in case of incidents and during regular audits. We present an extensible framework for managing and analyzing security policies during their whole life cycle. Our framework integrates versioning of policies and logfiles with policy animation, static analysis, and debugging techniques. For example, this combination allows for comparing different versions of security policies or the replaying and animation of system traces based on logfiles.
SN  - 978-0-7695-4330-7/11
UR  - http://www.brucker.ch/bibliography/abstract/brucker.ea-framework-2011
L1  - http://www.brucker.ch/bibliography/download/2011/brucker.ea-framework-2011.pdf
UR  - http://dx.doi.org/10.1109/POLICY.2011.47
ID  - brucker.ea:framework:2011
ER  -