Detecting and eliminating the cascade vulnerability problem from multilevel security networks using soft constraints

  • Authors:
  • Stefano Bistarelli;Simon N. Foley;Barry O'Sullivan

  • Affiliations:
  • Dipartimento di Scienze, Università di Chieti-Pescara, Italy and Istituto di Informatica e Telematica, C.N.R., Pisa, Italy;Department of Computer Science, University College Cork, Ireland;Department of Computer Science, University College Cork, Ireland

  • Venue:
  • IAAI'04 Proceedings of the 16th conference on Innovative applications of artifical intelligence
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

The security of a network configuration is based, not just on the security of its individual components and their direct interconnections, but it is also based on the potential for systems to interoperate indirectly across network routes. Such interoperation has been shown to provide the potential for cascading paths that violate security, in a circuitous manner, across a network. In this paper we show how constraint programming provides a natural approach to expressing the necessary constraints to ensure multilevel security across a network configuration. In particular, soft constraints are used to detect and eliminate the cascading network paths that violate security. Taking this approach results in practical advancements over existing solutions to this problem. In particular, constraint satisfaction highlights the set of all cascading paths, upon which we can compute in polynomial time an optimal reconfiguration of the network and ensure security.