Affiliation:
1. IBM Research, USA
2. Imperial College, UK
3. The Open University, UK
Abstract
The goal of policy-based security management is to enable military personnel to specify security requirements in terms of simple, intuitive goals. These goals are translated into the concrete system settings in a way that the system behaves in a consistent and desirable way. This technology minimizes the technical expertise required by military personnel and automates security management while allowing a high level control by the human in the loop. This chapter describes a framework for managing security policies, and an overview of two prototypes that simplify different aspects of policy management in the context of coalition operations.
Reference24 articles.
1. Agrawal, D., Calo, S. B., Lee, K.-W., & Lobo, J. (2007). Issues in Designing a Policy Language for Distributed Management of IT Infrastructures. In Integrated Network Management, (pp. 30-39).
2. AgrawalD.GilesJ.LeeK.LoboJ. (2005). Policy Ratification (pp. 223–232). POLICY.
3. Becker, M. Y., & Sewell, P. (2004). Cassandra: Flexible trust management, applied to electronic health records. In CSFW, (pp. 139–154). Washington, DC: IEEE Computer Society.
4. Beigi, M., Calo, S., & Verma, D. (2004, June). Policy Transformation Techniques in Policy-based Systems Management. In Policy Workshop 2004, Yorktown, New York.
5. BiasR.MayhewD. (Eds.). (2005). Cost-Justifying Usability: An Update for the Internet Age (2nd ed.). San Francisco: Morgan Kaufman.