Conference paper Open Access

An approach to Separation of Duties validation for MILS security configurations

Kort, Semen; Kulagin, Dimitry; Rudina, Ekaterina


JSON-LD (schema.org) Export

{
  "@context": "https://schema.org/", 
  "@id": "https://doi.org/10.5281/zenodo.571156", 
  "@type": "ScholarlyArticle", 
  "creator": [
    {
      "@type": "Person", 
      "affiliation": "Kaspersky Lab", 
      "name": "Kort, Semen"
    }, 
    {
      "@type": "Person", 
      "affiliation": "Kaspersky Lab", 
      "name": "Kulagin, Dimitry"
    }, 
    {
      "@type": "Person", 
      "affiliation": "Kaspersky Lab", 
      "name": "Rudina, Ekaterina"
    }
  ], 
  "datePublished": "2017-03-14", 
  "description": "<p>Separation of duties (SoD) is an important concept aimed to constrain the excessive powers of subjects regarding system assets and control functions. Ensuring the fact that SoD is properly implemented for the particular task may require the individual approach in every given case.<br>\nThis paper proposes an approach to SoD validation conducted by the analysis of the security configuration of MILS-based solution. The security policy based on object capabilities is considered for this purpose. For this security policy two basic issues should be met. The first issue is the enough expressivity of the security policy. It is addressed with demonstration of particular examples of usage scenarios. The second issue regards the conditions under which the security problem remains tractable. Solving this issue in context of specifically defined SoD criteria is at the core of this research.<br>\nThe approach is implemented for the security configurations of Kaspersky Security System.</p>", 
  "headline": "An approach to Separation of Duties validation for MILS security configurations", 
  "identifier": "https://doi.org/10.5281/zenodo.571156", 
  "image": "https://zenodo.org/static/img/logos/zenodo-gradient-round.svg", 
  "keywords": [
    "security system", 
    "security policy", 
    "security configuration", 
    "separation of duties", 
    "validation"
  ], 
  "license": "https://creativecommons.org/licenses/by/4.0/", 
  "name": "An approach to Separation of Duties validation for MILS security configurations", 
  "url": "https://zenodo.org/record/571156"
}
17
9
views
downloads
All versions This version
Views 1717
Downloads 99
Data volume 2.2 MB2.2 MB
Unique views 1616
Unique downloads 88

Share

Cite as