Evaluating Confidence in Context for Context-Aware Security

Lacoste, Marc; Privat, Gilles; Ramparany, Fano

doi:10.1007/978-3-540-76652-0_13

Cited by 10 publications

(11 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The framework, a first version of which was already presented, realizes the control structure automating the entire process of reconfiguration of security subsystems based on trustworthy contextual information [38]. Modularity and extensibility are achieved using a component-based architecture to introduce flexibility in each step of reconfiguration.…”

Section: Discussionmentioning

confidence: 99%

A component-based policy-neutral architecture for kernel-level access control

Lacoste

Jarboui

2008

Ann. Telecommun.

Self Cite

View full text Add to dashboard Cite

Protection should fundamentally be flexible for devices roaming in Beyond 3G networks. In this federation of heterogeneous access networks, each sub-network comes with its own security requirements, policies, and protocols. Foundational element of device security, the embedded OS itself, should become adaptable to make it possible to tune its protection mechanisms to the current security context, notably to support multiple authorization policies. We show how flexibility can be applied to the kernel authorization architecture by adopting a component-based OS design, the component serving as single abstraction for reconfiguration and security. We present a policy-neutral access control architecture called CRACKER (Component-based Reconfigurable Access Control for KERnels) for componentbased operating systems. CRACKER supports a wide range of authorization policies, and permits policy reconfiguration, in the same or in different security models. Specified in the Fractal component model, and implemented in the Think OS, CRACKER illustrates how flexible kernel authorization can be realized while maintaining acceptable system performance.

show abstract

Section: Discussionmentioning

confidence: 99%

A component-based policy-neutral architecture for kernel-level access control

Lacoste

Jarboui

2008

Ann. Telecommun.

Self Cite

View full text Add to dashboard Cite

show abstract

“…In addition, they propose to apply a new policy without checking if the nodes can handle it, which may be harmful to the network. Lacoste et al [8] propose an approach that uses context-awareness for adaptive security. The context knowledge is combined with confidence and reputation metadata.…”

Section: Related Workmentioning

confidence: 99%

A Hybrid Threat Detection and Security Adaptation System for Industrial Wireless Sensor Networks

Bahria

Olivereau

Boudguiga

2014

Self-Organizing Systems

View full text Add to dashboard Cite

Abstract. Wireless Sensor Networks (WSNs) led the way to new forms of communications, which extend today the Internet paradigm to unforeseen boundaries. The legacy industry, however, is slower to adopt this technology, mainly for security reasons. Self-managed security systems allowing a quicker detection of and better resilience to attacks, may counterbalance this reluctance. We propose in this paper a hybrid threat detection and security adaptation system, designed to run on top of industrial WSNs. We explain why this system is suitable for architectures mainly composed of constrained or sleeping devices, while being able to achieve a fair level of autonomous security.

show abstract

“…The Context Manager is responsible for collecting information that influences the system (or the application) through appropriate context sensors, for aggregating semantically these information, and for notifying the Adaptation Planning Manager component of relevant context changes. Context information are related to computing resources, environment state, or user preferences, but may also include security-relevant meta-data, describing the authenticity, secrecy, or integrity of the underlying context data [17].…”

Section: Overall Architecturementioning

confidence: 99%

A QoS and Security Adaptation Model for Autonomic Pervasive Systems

Alia

Lacoste

2008

2008 32nd Annual IEEE International Computer Software and Applications Conference

Self Cite

View full text Add to dashboard Cite

The unpredictable fluctuations in computing resources, contexts, and user preferences that characterize pervasive environments have stressed the need for context-aware selfadaptive systems. So far, this research area mostly dealt exclusively with concerns related either to standard QoS or to security. Taking into account trade-offs between these two conflicting concerns is a key issue, since they both compete for the same resources. This paper presents a general adaptivity model that reconciles these two concerns. This model is formalized as a component composition selection process, where the best composition is found by reasoning on security and non-security properties of the system. Utility functions are used to quantify how a component composition alternative is appropriate in a given context, with respect to the user preferences.

show abstract

Evaluating Confidence in Context for Context-Aware Security

Cited by 10 publications

References 25 publications

A component-based policy-neutral architecture for kernel-level access control

A component-based policy-neutral architecture for kernel-level access control

A Hybrid Threat Detection and Security Adaptation System for Industrial Wireless Sensor Networks

A QoS and Security Adaptation Model for Autonomic Pervasive Systems

Contact Info

Product

Resources

About