Achieving a security goal in a networked system requires the cooperation of a variety of devices, each device potentially requiring a different configuration. Many information security problems may be solved with appropriate models of these devices and their interactions, and giving a systematic way to handle the complexity of real situations. The paper presents an approach, rigorous automated network security management, which front-loads formal modeling and analysis before problem-solving, thereby providing easy-to-run tools with rigorously justified results. With this approach, the paper models the network and a class of practically important security goals. The models derived suggest algorithms which, given system configuration information, determine the security goals satisfied by the system.
Did you find this white paper useful?
1 out of 3 users found this white paper useful
Related white papers
Balancing Security Against Productivity
What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
Telecom Provider Increases Network Performance and Security, Reduces Costs
Oman Mobile is the leading mobile telecommunications provider in Oman. In 2007, the company decided to enhance the performance of its IT infrastructure and make it easier to manage. Also,...
Design Alternatives for a High-Performance Self-Securing Ethernet Network Interface
This paper presents and evaluates a strategy for integrating the Snort network intrusion detection system into a high-performance programmable Ethernet Network Interface Card (NIC), considering the impact of several possible...
Creditor Expects New Business Opportunities and Increased Employee Productivity
COFIDIS Portugal sells consumer-credit products both directly and through outside resellers. These partners require secure access to company programs without costly virtual private networks. Employees also need remote access to...
No More FTP: Eliminate FTP and Email Attachment Issues
Today's business environment requires ad hoc and instantaneous sharing of information. Systems for sending large files have not kept pace with the needs of today's enterprise, where increasingly large and...
