Enforceable security policies revisited
POST'12 Proceedings of the First international conference on Principles of Security and Trust
MONPOLY: monitoring usage-control policies
RV'11 Proceedings of the Second international conference on Runtime verification
Enforceable Security Policies Revisited
ACM Transactions on Information and System Security (TISSEC)
| Hi-index | 0.00 |
We have previously presented a monitoring algorithm for compliance checking of policies formalized in an expressive metric first-order temporal logic. We explain here the steps required to go from the original algorithm to a working infrastructure capable of monitoring an existing distributed application producing millions of log entries per day. The main challenge is to correctly and efficiently monitor the trace interleavings obtained by totally ordering actions that happen at the same time. We provide solutions based on formula transformations and monitoring representative traces. We also report, for the first time, on statistics on the performance of our monitor on real-world data, providing evidence of its suitability for nontrivial applications.