Experience with Adaptive Security Policies.

Carney, Michael; Loe, Brian; Mitchem, Terrence

Experience with Adaptive Security Policies.

Active / Technical Report | Accession Number: ADA345381 |

Open PDF

Abstract:

This final report contains results from studying several aspects of adaptive security policies, including an assessment of the impact on assurance evidence from the loss of tranquility assumptions, the usefulness of audit during recovery from relaxed security, the use of a tool for specifying security databases, and trade-offs associated with different mechanisms for implementing adaptive security.

Author(s):

Carney, Michael ; Loe, Brian ; Mitchem, Terrence

Author Organization(s):

SECURE COMPUTING CORP ROSEVILLE MN

Descriptive Note:

Final rept. Jul 96-Jan 98,

Supplementary Note:

DOI: 10.21236/ADA345381

Pagination:

0072

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:

Approved For Public Release

RECORD

Collection: TR

Identifying Numbers

Report Number(s):

AFRL-IF-RS-TR-1998-13

Contract/Grant Number(s):

F30602-96-C-0210

Task Number(s):

01

Project Number(s):

1069

Monitor Series:

TR-1998-13, AFRL-IF-RS

Subject Terms

Joint Capability Areas:

JCA_5_Command and Control; JCA_4.7.2_Installation Services; JCA_4.7_Base and Installations Support; JCA_5.5.2_Task; JCA_5.5_Direct; JCA_5.3_Planning; JCA_5.6.1_Assess Compliance with Guidance; JCA_5.6_Monitor; JCA_2.1_Planning and Direction; JCA_2.1.1_Define and Prioritize Requirements; JCA_5.3.2_Apply Situational Understanding; JCA_5.2.2_Develop Knowledge and Situational Awareness; JCA_5.2_Understand; JCA_1.2.5_Lessons Learned; JCA_1.3.2_Personnel Management; JCA_1.2.6_Concepts; JCA_4.3_Maintain; JCA_5.4_Decide

Modernization Areas:

Cyber

Communities of Interest:

Biomedical

Descriptor(s):

*REGULATIONS, *ELECTRONIC SECURITY, DATA BASES, POLICIES, SECURITY, ADAPTIVE SYSTEMS

Field(s)/Group(s):

Defense Systems, Government and Political Science

Keyword(s):

*ADAPTIVE SECURITY POLICIES, DYNAMIC SECURITY LATTICES, POLICY ENFORCEMENT SEPARATION, SECURITY DATABASE SPECIFICATION, FORMAL ASSURANCE, WUAFRL106901P5

Report Date:

1998 Mar 01

Creation Date:

1998 Jun 10