FOCS'10 Proceedings of the 16th Monterey conference on Foundations of computer software: modeling, development, and verification of adaptive systems
Model checking security policy model using both UML static and dynamic diagrams
Proceedings of the 4th international conference on Security of information and networks
| Hi-index | 0.00 |
Policy-based management is drawing attention as a solution to managing today's complex information systems. To be dependable, a policy-based system must be able to check the validity of a policy written by administrators. However, common test methods such as operations tests in a test scenario and simulations cannot check whether systems with given policies will work properly in every possible situation. To solve this problem, we propose a policy verification and validation framework based on model checking that exhaustively verifies a policy's validity by considering the relations between system characteristics and policies. We first define the validity of policies and the information needed to verify them from the viewpoint of model checking. We then construct our policy verification framework based on the definition and, finally, present a case study applying this framework to an on-demand data center scenario and show the effectiveness of our approach.