Verifying Enterprise 's Mandatory Access Control Policies with Coloured Petri Nets

  • Authors:
  • Krzysztof Juszczyszyn

  • Affiliations:
  • -

  • Venue:
  • WETICE '03 Proceedings of the Twelfth International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

The paper addresses important problems met whenimplementing mandatory access control policies incomplex distributed systems (e.g.enterprise networks).The role of formal security models is also presented andthe properties of the model suitable for systems underconsideration are defined.Then a formal security model,Secure Coloured Petri Net - using coloured Petri net'ssemantics - is proposed. It is shown how the enterprisesecurity management system may take advantage of theproposed model's properties. Application of colouredPetri nets analysis and construction methods toinformation flow security analysis is also proposed anddiscussed.