Real-Time Verification of Integrity Policies for Distributed Systems
Fuente:
Redalyc
Saved in:
| Main Author: | |
|---|---|
| Format: | Artículo científico |
| Language: | en |
| Published: |
Universidad Nacional Autónoma de México
2013
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1876468525446463488 |
|---|---|
| author | Ernesto Buelna |
| author_facet | Ernesto Buelna |
| contents | Real-Time Verification of Integrity Policies for Distributed Systems Ernesto Buelna Raúl Monroy Ingeniería Real integrity policies NET code injection distributed systems information security We introduce a mechanism for the verification of real-time integrity policies about the operation of a distributed system. Our mechanism is based on Microsoft .NET technologies. Unlike rival competitors, it is not intrusive, as it hardly modifies the source code of any component of the system to be monitored. Our mechanism consists of four modules: the specification module, which comes with a security policy specification language, geared towards the capture of integrity policies; the monitoring module, which includes a code injector, whereby the mechanism observes how specific methods of the system, referred to by some policy, are invoked; the verifier module, which examines the operation of the distributed system in order to determine whether is policy compliant or not; and, the reporter module, which notifies the system is policy compliant, or sends an alert upon the occurrence of a contingency, indicating policy violation. We argue that our mechanism can be framed within the Clark and Wilson security model, and, thus, used to realise information integrity. We illustrate the workings and the power of our mechanism on a simple, but industrial- strength, case study. 2013 artículo científico 1665-6423 https://www.redalyc.org/articulo.oa?id=47430518004 en http://www.redalyc.org/revista.oa?id=474 Journal of Applied Research and Technology application/pdf Universidad Nacional Autónoma de México Journal of Applied Research and Technology (México) Num.6 Vol.11 |
| format | Artículo científico |
| id | redalyc_47430518004 |
| institution | Redalyc |
| language | en |
| publishDate | 2013 |
| publisher | Universidad Nacional Autónoma de México |
| spellingShingle | Real-Time Verification of Integrity Policies for Distributed Systems Ernesto Buelna Ingeniería Real integrity policies NET code injection distributed systems information security Real-Time Verification of Integrity Policies for Distributed Systems Ernesto Buelna Raúl Monroy Ingeniería Real integrity policies NET code injection distributed systems information security We introduce a mechanism for the verification of real-time integrity policies about the operation of a distributed system. Our mechanism is based on Microsoft .NET technologies. Unlike rival competitors, it is not intrusive, as it hardly modifies the source code of any component of the system to be monitored. Our mechanism consists of four modules: the specification module, which comes with a security policy specification language, geared towards the capture of integrity policies; the monitoring module, which includes a code injector, whereby the mechanism observes how specific methods of the system, referred to by some policy, are invoked; the verifier module, which examines the operation of the distributed system in order to determine whether is policy compliant or not; and, the reporter module, which notifies the system is policy compliant, or sends an alert upon the occurrence of a contingency, indicating policy violation. We argue that our mechanism can be framed within the Clark and Wilson security model, and, thus, used to realise information integrity. We illustrate the workings and the power of our mechanism on a simple, but industrial- strength, case study. 2013 artículo científico 1665-6423 https://www.redalyc.org/articulo.oa?id=47430518004 en http://www.redalyc.org/revista.oa?id=474 Journal of Applied Research and Technology application/pdf Universidad Nacional Autónoma de México Journal of Applied Research and Technology (México) Num.6 Vol.11 |
| title | Real-Time Verification of Integrity Policies for Distributed Systems |
| topic | Ingeniería Real integrity policies NET code injection distributed systems information security |
| url | https://www.redalyc.org/articulo.oa?id=47430518004 |