loading...
A Flexible Architecture for Security Policy Enforcement
Washington, DC April 22-April 24
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/DISCEX.2003.1194971DARPA Information Survivability Confe ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Patrick McDaniel, AT&T Labs - Research
Atul Prakash, University of Michigan
Significant progress has been made on the design of security policy representations for complex communication systems. A significant problem however remains - how to design software architectures that enforce ever- changing security policy requirements efficiently. This research summary describes the security policy enforcement architecture of the Antigone 2.0 the group communication system. The architecture is designed to be flexible: new security mechanism modules are added as needed to support emerging policy requirements. Such mechanisms regulate the processing of system and network events as directed by the policy and enforce fine- grained control over sensitive data. A software bus is used coordinate the delivery of these events to mechanisms within each process. We summarize an analysis of the performance of the architecture and show that the overheads are modest for typical environments.
Citation:
Patrick McDaniel, Atul Prakash, "A Flexible Architecture for Security Policy Enforcement," discex, vol. 2, pp.234, DARPA Information Survivability Conference and Exposition - Volume II, 2003
Usage of this product signifies your acceptance of the Terms of Use.