A situation-driven framework for dynamic security management

Romain Laborde (1) , Arnaud Oglaza (1) , Ahmad Samer Wazan (1) , François Barrère (1) , Abdelmalek Benzekri (1, 2)

1 IRIT-SIERA - Service IntEgration and netwoRk Administration
2 UT3 - Université Toulouse III - Paul Sabatier

We present a dynamic security management framework where security policies are specified according to situations. Situation-based policies easily express complex dynamic security measures, are closer to business, and simplify the policy life cycle management. Situations are specified using complex event processing techniques. The framework is supported by a modular event–based infrastructure where a dedicated situation manager maintains active situations allowing the command center to take dynamic situation–based authorization and obligation decisions. The whole framework has been implemented and showed good performance by simulation. Finally, we detail two real experiments.

Mots clés: Situation awareness; Attribute-based access control; Complex event processing; XACMLv3; Policy-based management; Dynamic security management

Domaines: Réseaux et télécommunications [cs.NI]; Système d'exploitation [cs.OS]; Architectures Matérielles [cs.AR]; Systèmes embarqués

Romain Laborde, Arnaud Oglaza, Ahmad Samer Wazan, François Barrère, Abdelmalek Benzekri. A situation-driven framework for dynamic security management. Annals of Telecommunications - annales des télécommunications, 2019, 74 (3-4), pp.185-196. ⟨10.1007/s12243-018-0673-0⟩. ⟨hal-02548013⟩