An Approach to Information Security Policy Modeling for Enterprise Networks - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2014

An Approach to Information Security Policy Modeling for Enterprise Networks

Abstract

Network security management is one of the most topical concerns of information security (IS) in modern enterprises. Due to great variety and increasing complexity of network security systems (NSSs) there is a challenge to manage them in accordance with IS policies. Incorrect configurations of NSSs lead to outages and appearance of vulnerabilities in networks. Moreover, policy management is a time and resource consuming process, which takes significant amount of manual work. The paper discusses issues of policy management process in its application for NSSs and describes a policy model aimed to facilitate the process by means of specification of IS policies independently on platforms of NSSs, selection of the most effective NSSs aligned with the policies, and implementation of the policies in configurations of the NSSs.
Fichier principal
Vignette du fichier
978-3-662-44885-4_10_Chapter.pdf (638.42 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01404201 , version 1 (28-11-2016)

Licence

Attribution

Identifiers

Cite

Dmitry Chernyavskiy, Natalia Miloslavskaya. An Approach to Information Security Policy Modeling for Enterprise Networks. 15th IFIP International Conference on Communications and Multimedia Security (CMS), Sep 2014, Aveiro, Portugal. pp.118-127, ⟨10.1007/978-3-662-44885-4_10⟩. ⟨hal-01404201⟩
67 View
272 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More