NATO is developing a new IT infrastructure for automated information sharing between different information security domains and supporting dynamic and flexible enforcement of the need-to-know principle. In this context, the Content-based Protection and Release (CPR) model has been introduced to support specification and enforcement of NATO access control policies. While the ability to define fine-grained security policies for a large variety of users, resources, and devices is desirable, their definition, maintenance, and enforcement can be difficult, time-consuming, and error prone. In this paper, we give an overview of a tool capable of assisting NATO security personnel in these tasks by automatically solving several policy analysis problems of practical interest. The tool levarages state-of-the-art SMT solvers.

A SMT-based tool for the analysis and enforcement of NATO content-based protection and release policies / Armando, A.; Ranise, S.; Traverso, R.; Wrona, K.. - 2015-:(2015), pp. 151-155. (Intervento presentato al convegno 20th ACM Symposium on Access Control Models and Technologies, SACMAT 2015 tenutosi a aut nel 2015) [10.1145/2752952.2752954].

A SMT-based tool for the analysis and enforcement of NATO content-based protection and release policies

Ranise S.;
2015-01-01

Abstract

NATO is developing a new IT infrastructure for automated information sharing between different information security domains and supporting dynamic and flexible enforcement of the need-to-know principle. In this context, the Content-based Protection and Release (CPR) model has been introduced to support specification and enforcement of NATO access control policies. While the ability to define fine-grained security policies for a large variety of users, resources, and devices is desirable, their definition, maintenance, and enforcement can be difficult, time-consuming, and error prone. In this paper, we give an overview of a tool capable of assisting NATO security personnel in these tasks by automatically solving several policy analysis problems of practical interest. The tool levarages state-of-the-art SMT solvers.
2015
Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT
United States
Association for Computing Machinery
9781450335560
Armando, A.; Ranise, S.; Traverso, R.; Wrona, K.
A SMT-based tool for the analysis and enforcement of NATO content-based protection and release policies / Armando, A.; Ranise, S.; Traverso, R.; Wrona, K.. - 2015-:(2015), pp. 151-155. (Intervento presentato al convegno 20th ACM Symposium on Access Control Models and Technologies, SACMAT 2015 tenutosi a aut nel 2015) [10.1145/2752952.2752954].
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11572/333074
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 0
  • ???jsp.display-item.citation.isi??? ND
social impact