Security policy pre-evaluation towards risk analysis

Han Yi, Yoshiaki Hori, Kouichi Sakurai

研究成果: Chapter in Book/Report/Conference proceedingConference contribution

7 被引用数 (Scopus)

抄録

Nowadays, security policy evaluation becomes a very hot topic since high QoP(Quality of Protection) is required by more and more people. Most of the researchers focus on the security policy evaluation after they have been enforced into real application systems via some real attacks. However, before security policy enforcement, the policy themselves may also contain some anomalies which shouldn't be ignored. In this paper, we pointed out the importance of security policy pre-evaluation which focuses on security , policy evaluation before policy enforcement. In addition we propose a framework for it towards risk analysis. As a concrete example, we show how to apply our framework to firewall security policies. Finally we discuss about the difficulty of our proposal and show future work interests.

本文言語英語
ホスト出版物のタイトルProceedings of the 2nd International Conference on Information Security and Assurance, ISA 2008
ページ415-420
ページ数6
DOI
出版ステータス出版済み - 9 15 2008
イベント2nd International Conference on Information Security and Assurance, ISA 2008 - Busan, 大韓民国
継続期間: 4 24 20084 26 2008

出版物シリーズ

名前Proceedings of the 2nd International Conference on Information Security and Assurance, ISA 2008

その他

その他2nd International Conference on Information Security and Assurance, ISA 2008
国/地域大韓民国
CityBusan
Period4/24/084/26/08

All Science Journal Classification (ASJC) codes

  • コンピュータ ネットワークおよび通信
  • 情報システムおよび情報管理
  • 電子工学および電気工学
  • 通信

フィンガープリント

「Security policy pre-evaluation towards risk analysis」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル