Security Policy Conflicts in Service-oriented Systems

被引：2

作者：

Brodecki, Bartosz ^{[1
]}

Szychowiak, Michal ^{[1
]}

Sasak, Piotr ^{[1
]}

机构：

[1] Poznan Univ Tech, Inst Comp Sci, PL-60965 Poznan, Poland

来源：

NEW GENERATION COMPUTING | 2012年 / 30卷 / 2-3期

关键词：

Security Policy; Conflict Detection Algorithm;

D O I：

10.1007/s00354-012-0206-8

中图分类号：

TP3 [计算技术、计算机技术];

学科分类号：

0812 ;

摘要：

This paper considers methods for knowledge exploitation in security policies for Service-Oriented Architecture (SOA) environments, discovering the modality conflicts in particular. Two algorithms for discovering SOA-specific modality conflicts are proposed. First, a trivial (ad-hoc) approach is presented and further extended by the improved algorithm which offers lower time complexity. The formal verification of the proposal is followed by experimental results confirming the expected supremacy of the improved algorithm.

引用

页码：215 / 240

页数：26

共 13 条

[1] Dealing with Multi Security Policies in Communication Networks [J].

Abassi, Ryma ;

El Fatmi, Sihem Guemara .

ICNS: 2009 FIFTH INTERNATIONAL CONFERENCE ON NETWORKING AND SERVICES, 2009, :282-287

[2]

[Anonymous], 2004, IEEE Transactions on Network and Service Management, DOI [DOI 10.1109/TNSM.2004.4623689, 10.1109/TNSM.2004.4623689]

[3] LINEAR-TIME ALGORITHM FOR TESTING THE TRUTH OF CERTAIN QUANTIFIED BOOLEAN FORMULAS [J].

ASPVALL, B ;

PLASS, MF ;

TARJAN, RE .

INFORMATION PROCESSING LETTERS, 1979, 8 (03) :121-123

[4] Fast and scalable conflict detection for packet classifiers [J].

Baboescu, F ;

Varghese, G .

10TH IEEE INTERNATIONAL CONFERENCE ON NETWORK PROTOCOLS, PROCEEDINGS, 2002, :270-279

[5]

Brodecki B, 2009, LECT NOTES COMPUT SC, V5802, P589, DOI 10.1007/978-3-642-04409-0_57

[6]

Craven R., 2008, DTR20085 DEP COMP IM

[7]

Dijkstra E. W., 1959, NUMER MATH, V1, P269

[8]

Laskey K., 2006, REFERENCE M IN PRESS

[9] Conflicts in policy-based distributed systems management [J].

Lupu, EC ;

Sloman, M .

IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 1999, 25 (06) :852-869

[10]

Moffett J. D., 1994, Journal of Organizational Computing, V4, P1, DOI 10.1080/10919399409540214

← 1 2 →