4 results
Now showing1 - 4 of 4
- Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Measuring the interplay of security principles in software architecturesSecurity principles like least privilege and attack surface reduction play an important role in the architectural phase of security engineering processes. However, the interplay between these principles and the side effects of the application of these secure design strategies on architectural qualities like maintainability have not been studied so far. Therefore it is hard to make informed trade-off decisions between security principles and between security and other qualities. This paper tackles this problem from a quantitative perspective by presenting the experimental results in the context of three case studies.Publicationtype: Conference Paper13 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Risk-driven architectural decompositionArchitectural modelling and risk management are invaluable to increase the security of a software system. The purpose of this work is to show how both approaches can be integrated in a risk-aware architectural modelling technique. As the modelling is formal, the approach offers stronger guarantees that the resulting architecture achieves its security requirements.Publicationtype: Conference Paper15 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , The design and evaluation of a defense system for internet wormsMany areas of society have become heavily dependent on services such as transportation facilities, utilities and so on that are implemented in part by large numbers of computers and communications links. Both past incidents and research studies show that a well-engineered Internet worm can disable such systems in a fairly simple way and, most notably, in a matter of a few minutes. This indicates the need for defenses against worms but their speed rules out the possibility of manually countering worm outbreaks. We present a platform that emulates the epidemic behavior of Internet active worms in very large networks. A reactive control system operates on top of the platform and provides a monitor/analyze/respond approach to deal with infections automatically. Details of our highly configurable platform and various experimental performance results are presented.Publicationtype: Conference Paper15 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , LMAP: A protocol to automate the setup of logical networksThis paper presents the Logical Membership Announcement Protocol (LMAP), a new signaling protocol that handles the construction of logical topologies (e.g. overlay networks) in a straightforward way. LMAP defines both a way to disseminate membership information into the network and a way to determine the adjacencies that must be established between members to create the logical topology. LMAP represents a building block for upper-layer distributed services (e.g. virtual private networks, BGP peering, and more) that rely on a logical topology to achieve their functionality. Moreover, appropriate protocol extensions can be used to transport information that is meaningful only to the service application. This paper presents the key points behind LMAP, it describes how LMAP works, it makes a comparison with other proposals, and it shows some preliminary results proving its robustness and its excellent scalability.Publicationtype: Conference Paper21