MLS security policy evolution with genetic programming

  • Authors:
  • Yow Tzu Lim;Pau Chen Cheng;Pankaj Rohatgi;John Andrew Clark

  • Affiliations:
  • University of York, York, England, UK;IBM Watson Research Center, Hawthorne, NY, USA;IBM Watson Research Center, Hawthorne, NY, USA;University of York, York, England, UK

  • Venue:
  • Proceedings of the 10th annual conference on Genetic and evolutionary computation
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

In the early days a policy was a set of simple rules with a clear intuitive motivation that could be formalised to good effect. However the world is becoming much more complex. Subtle risk decisions may often need to be made and people are not always adept at expressing rationale for what they do. In this paper we investigate how policies can be inferred automatically using Genetic Programming (GP) from examples of decisions made. This allows us to discover a policy that may not formally have been documented, or else extract an underlying set of requirements by interpreting user decisions to posed "what if" scenarios. Three proof of concept experiments on MLS Bell-LaPadula, Budgetised MLS and Fuzzy MLS policies have been carried out. The results show this approach is promising.