Open AccessA Formal Approach for the Evaluation of Network Security Mechanisms Based on RBAC Policies
Author(s) -
Romain Laborde,
Bassem Nasser,
Frédéric Grasset,
François Barrère,
Abdelmalek Benzekri
Publication year - 2005
Publication title -
electronic notes in theoretical computer science
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.242
H-Index - 60
ISSN - 1571-0661
DOI - 10.1016/j.entcs.2004.10.011
Subject(s) - computer science , reachability , computer security model , security service , computer security , security information and event management , network security , petri net , network access control , security convergence , role based access control , security policy , security through obscurity , set (abstract data type) , network security policy , cloud computing security , distributed computing , access control , information security , theoretical computer science , programming language , cloud computing , operating system
ecurity policy models allow reasoning about security goals achievements. When security mechanisms are implemented, it is difficult to formally validate the security properties against the security goals especially in a network environment. To assess the implemented security properties, one should consider details regarding the network topology, the forwarding as well as filtering and transform engines. In this paper, we present a Colored Petri Net based tool which allows to describe graphically a given network topology, the network security mechanisms and the security goals required. The tool computes the different functionalities to set up the security properties and formally validates the solution using the dead state of the generated reachability graph analysis. Different security properties such as confidentiality and availability can be studied
Accelerating Research
Robert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom
Address
John Eccles HouseRobert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom