Max-Planck-Institut für Informatik
max planck institut
mpii logo Minerva of the Max Planck Society

MPI-INF or MPI-SWS or Local Campus Event Calendar

<< Previous Entry Next Entry >> New Event Entry Edit this Entry Login to DB (to update, delete)
What and Who
Title:Enforceable Security Policies
Speaker:Prof. Dr. David Basin
coming from:ETH Zurich
Speakers Bio:
Event Type:CISPA Distinguished Lecture Series
Visibility:D1, D2, D3, D4, D5, SWS, RG1, MMCI
We use this to send out email in the morning.
Level:AG Audience
Date, Time and Location
Date:Thursday, 22 January 2015
Duration:60 Minutes
Building:E1 5
Security mechanisms are omnipresent and found at all layers of the
hardware and software stack, ranging from memory management
hardware to policy decision and enforcement points used in
middleware and web services. A fundamental question is "what kinds
of security policies can such mechanisms enforce?"

We examine this question for mechanisms that work by execution
monitoring. This covers a wide class of access control mechanisms which
intercept actions and prevent unauthorized actions from occurring, based
on a security policy. We will review work in this setting, in
particular the seminal work of Fred Schneider on the relationship
between enforceable security properties and safety properties. We will
clarify limitations in existing work and give necessary and sufficient
conditions for a security policy to be enforceable. In doing so, we
build upon ideas from control theory and formal language theory.
Furthermore, for different specification languages, we provide results
on deciding whether a given policy is enforceable and synthesizing an
enforcement mechanism from an enforceable policy.

(Joint work with Vincent Juge, Felix Klaedtke and Eugen Zalinescu)
Name(s):Sabine Nermerich
EMail:--email address not disclosed on the web
Video Broadcast
Video Broadcast:NoTo Location:
Tags, Category, Keywords and additional notes
Attachments, File(s):
  • Sabine Nermerich, 01/21/2015 01:48 PM
  • Sabine Nermerich, 12/17/2014 09:15 AM -- Created document.