International Conference on Enterprise Information Systems, 2005
An access control policy mediates access between authorized users of a computer system and system... more An access control policy mediates access between authorized users of a computer system and system resources. Access control policies are defined at a given level of abstraction, such as the file, directory, system, or network, and can be instantiated in layers of increasing (or decreasing) abstraction. In this paper, the concept of a metapolicy, or policy that governs execution of subordinate security policies, is introduced. The metapolicy provides a method to communicate updated higher level policy information to all components of a system; it minimizes the overhead associated with access control decisions by making access decisions at the highest level possible in the policy hierarchy. This paper discusses how metapolicies are defined and how they relate to other access control mechanisms. The rationale for revisiting metapolicies as an access control option for federated enterprise architectures is presented, and a framework for further research in metapolicy use as a context based access control representation is described.
Information Systems today rarely are contained within a single user workstation, server, or netwo... more Information Systems today rarely are contained within a single user workstation, server, or networked environment. Data can be transparently accessed from any location, and maintained across various network infrastructures. Cloud computing paradigms commoditize the hardware and software environments and allow an enterprise to lease computing resources by the hour, minute, or number of instances required to complete a processing task. An access control policy mediates access requests between authorized users of an information system and the system's resources. Access control policies are defined at any given level of abstraction, such as the file, directory, system, or network, and can be instantiated in layers of increasing (or decreasing) abstraction. For the system end-user, the functional allocation of security policy to discrete system components, or subsystems, may be too complex for comprehension. In this dissertation, the concept of a metapolicy, or policy that governs ex...
“Let Me Tell You What I Want ” – Security Policy Elicitation Through Computational Narration
A system security policy is subject to considerable interpretation. What to the end user may be a... more A system security policy is subject to considerable interpretation. What to the end user may be a perfectly reasonable access control policy may be impossible to architect into an enforceable policy implementation. The earlier such policy disconnect can be found, the less severe the impact on the system design, cost, and schedule. This paper discusses the use of computational narrative, or computer-assisted storytelling, as a method for eliciting the access control policy associated with a given information system. Similarities in the structure between computational narration and access control models are presented, as are attempts to apply computational narration in similar domains. Finally, a research project is proposed to determine the feasibility of computational narration as an access control modeling technique.
A system security policy is often perceived as a set of mandatory requirements levied upon the sy... more A system security policy is often perceived as a set of mandatory requirements levied upon the system by an organizational directive or Information System Security Officer (ISSO). To the user, these security requirements may bear little resemblance to his actual working system security policy, which controls data modification and user privileges. In the course of reengineering business processes and
: For the past two years, Harris Corporation has been conducting research for the U.S. Air Force ... more : For the past two years, Harris Corporation has been conducting research for the U.S. Air Force Research Laboratory under the Network Vulnerability Tool (NVT) Study. The Network Vulnerability Tool concept develops and applies a single topological system model. This model supports the information needs of multiple vulnerability analysis tools using an integrated knowledge solicitation and translation framework. As part of this effort, vulnerability tools from COTS, GOTS, and research laboratory sources were surveyed, and a representative sample tool collection was selected for inclusion in the NVT prototype. The prototype integrates and interactively applies multiple existing vulnerability assessment technologies, resulting in a cohesive, combined vulnerability/risk assessment. The combined risk assessment provides a readily comprehensible picture of the risk posture, assisting the analyst in the definition of an acceptable risk posture for an operational system or preliminary system d...
36th Annual Hawaii International Conference on System Sciences, 2003. Proceedings of the
The term " assurance" has been used for decades in trusted system development as an expression of... more The term " assurance" has been used for decades in trusted system development as an expression of confidence that one has in the strength of mechanisms or countermeasures. One of the unsolved problems of security engineering is the adoption of measures or metrics that can reliably depict the assurance associated with a specific hardware and software system. This paper reports on a recent attempt to focus requirements in this area by examining those currently in use. It then suggests a categorization of Information Assurance (IA) metrics that may be tailored to an organization's needs 1. We believe that the provision of security mechanisms in systems is a subset of the systems engineering discipline having a large software-engineering correlation. There is general agreement that no single system metric or any "one-prefect" set of IA metrics applies across all systems or audiences. The set most useful for an organization largely depends on their IA goals, their technical, organizational and operational needs, and the financial, personnel, and technical resources that are available.
Proceedings of the 1999 workshop on New security paradigms - NSPW '99
A popular business paradigm for information systems treats the information infrastructure as a co... more A popular business paradigm for information systems treats the information infrastructure as a corporate utility. In this model, a fixed Total Cost of Ownership (TCO) is associated with a given workstation, the network infrastructure, user applications, and personnel required for operational support. Related to the TCO model is the Seat Management model, which exploits the economies of standardization and scale to reduce information technology expenses. In both of these models, a defined, measurable, service level is applied as a cost metric, For example, seven days per week, twenty-four hour help desk support is more costly than five clays per week, business hours support. These measurable service levels are defined as Service Level Agreements. Few security services have been specified in terms that are amenable to Service Level Agreements. This raises the question-can security be adequately expressed in a Service Level Agreement context. This paper looks at a derivation of security related service level agreements for a large enterprise. The possible applications of this approach are presented, as is a discussion of the caveats an information technology organization should consider prior to adopting security service level agreements. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. To copy otherwise, to republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee.
Sensor fusion and automatic vulnerability analysis
Security analysis of networked computing systems continues to present a challenge. The growing co... more Security analysis of networked computing systems continues to present a challenge. The growing complexity of network and computing systems, the increasing sophistication of computer attacks, and the limited supply of security specialist make automated security solutions a necessity. A number of independent solutions are often suggested for a system and then implemented as independent sensors. Little work has been done in fusing sensor outputs in a meaningful way in order to recognize an attack in progress in time to mitigate its impact.
Proceedings of the Seventh International Conference on Enterprise Information Systems
An access control policy mediates access between authorized users of a computer system and system... more An access control policy mediates access between authorized users of a computer system and system resources. Access control policies are defined at a given level of abstraction, such as the file, directory, system, or network, and can be instantiated in layers of increasing (or decreasing) abstraction. In this paper, the concept of a metapolicy, or policy that governs execution of subordinate security policies, is introduced. The metapolicy provides a method to communicate updated higher level policy information to all components of a system; it minimizes the overhead associated with access control decisions by making access decisions at the highest level possible in the policy hierarchy. This paper discusses how metapolicies are defined and how they relate to other access control mechanisms. The rationale for revisiting metapolicies as an access control option for federated enterprise architectures is presented, and a framework for further research in metapolicy use as a context based access control representation is described.
2003 Symposium on Applications and the Internet Workshops, 2003. Proceedings.
Wireless access points bring great convenience to the enterprise network, and also bring a large ... more Wireless access points bring great convenience to the enterprise network, and also bring a large collection of vulnerabilities into the enterprise environment. Wireless users pose new difficulties in authentication and confidentiality that can intentionally or inadvertently pose a threat to their wired colleagues. A comprehensive network vulnerability analysis must address wireless environment threats and vulnerabilities, including identification of unauthorized Wireless Access Points and incorrectly configured clients. This paper discusses the issues associated with vulnerability assessment in a wireless network and a recommended approach to integrating wireless devices into vulnerability scanning methodologies.
This paper is constructed on the premise that human belief dependent emotions can be triggered by... more This paper is constructed on the premise that human belief dependent emotions can be triggered by story-telling or narratives. With recent technological advancements to measure neurobiological measurements of the brain, such as functional magnetic resonance imaging (fMRI) and non-invasive brain computing interface (BCI) equipment, these technologies can allow for visualization and data collection of brain activation patterns showing unconsciously controlled responses to narratives or stories. Current game theory application to belief networks has been modeled to help explain observed behavior when material payoffs of others matters to the individual. We discuss a method of how game theory, utilizing communication packet theory, can now be modeled to belief dependent emotions and intentions measured through a new biometric tool correlating neurobiological emotional states and responses.
For the past two years, Harris Corporation has been conducting research for the U.S. Air Force Re... more For the past two years, Harris Corporation has been conducting research for the U.S. Air Force Research Laboratory under the Network Vulnerability Tool (NVT) Study. The Network Vulnerability Tool concept develops and applies a single topological system model. This model supports the information needs of multiple vulnerability analysis tools using an integrated knowledge solicitation and translation framework. As part of this effort, vulnerability tools from COTS, GOTS, and research laboratory sources were surveyed, and a representative sample tool collection was selected for inclusion in the NVT prototype. The prototype integrates and interactively applies multiple existing vulnerability assessment technologies, resulting in a cohesive, combined vulnerability/risk assessment. The combined risk assessment provides a readily comprehensible picture of the risk posture, assisting the analyst in the definition of an acceptable risk posture for an operational system or preliminary system ...
Designing for Disaster : Building Survivable Information Systems
hen a natural disaster strikes, a corporation normally places a disaster recovery plan into effec... more hen a natural disaster strikes, a corporation normally places a disaster recovery plan into effect. These plans define how a corporate knowledge base is reconstituted after a catastrophic failure, allowing an enterprise to continue its daily functions. However, natural disasters are relatively rare occurrences. A corporation that leases space at a site hosting facility and purchases disruption insurance has allocated assets in advance, with potentially no return on those investments if a disaster does not occur [1]. In this regard, disaster recovery is like insurance. With the ubiquity of the Internet, it has become more difficult to disrupt services for an extended period of time. Consumers expect 24-hour service or they take their Internet shopping elsewhere. Global enterprises now link what were isolated data centers to Enterprise Resource Planning systems to manage inventory and track consumer preferences. There is no downtime allowed in today's global economy. Enter the con...
were never too busy to very patiently answer my never-ending questions. Blaine Burnham helped sha... more were never too busy to very patiently answer my never-ending questions. Blaine Burnham helped shape my initial dissertation subject, and Rayford Vaughn convinced me that solving world peace was a noble thought but not the answer to a survivable dissertation. Richard Ford became the voice of urgency, as he consistently and patiently inquired about my progress. Joe Gulla helped me clarify the interrelationship between traditional requirements and security requirements. James Cannady let me take the path less traveled as I worked through the cognitive neurosciences and computer assisted narrative technologies to fuse the concepts into my dissertation research. My co-workers and peers offered more words of encouragement than I ever thought I would need: their inquiries of "are you done yet?" and patient endurance when I described why I was still working on it kept me moving in the right direction. They may not have understood it, but they understood it was my passion. My parents, Ronald and Julia, instilled my curiosity and love of learning at an early age. They never discouraged my studies and taught me that hard work would eventually pay off. For all the papers they reviewed and trips to the library over the years: Thank You. My siblings, Julia, Gloria, and Ronald, were always there to remind me that family weighed in balance with studies. Finally, none of it would ever have happened without the enduring love and patience of my late husband, Steven Eric Rose, who did not live to see the completion of this milestone. Steven encouraged my goals and did his best to push me along the way to fulfill my dreams. He never complained about my hours of research work, or my professional obligations. Without his love, support and devotion I would have never made it this far.
International Conference on Enterprise Information Systems, 2005
An access control policy mediates access between authorized users of a computer system and system... more An access control policy mediates access between authorized users of a computer system and system resources. Access control policies are defined at a given level of abstraction, such as the file, directory, system, or network, and can be instantiated in layers of increasing (or decreasing) abstraction. In this paper, the concept of a metapolicy, or policy that governs execution of subordinate security policies, is introduced. The metapolicy provides a method to communicate updated higher level policy information to all components of a system; it minimizes the overhead associated with access control decisions by making access decisions at the highest level possible in the policy hierarchy. This paper discusses how metapolicies are defined and how they relate to other access control mechanisms. The rationale for revisiting metapolicies as an access control option for federated enterprise architectures is presented, and a framework for further research in metapolicy use as a context based access control representation is described.
Information Systems today rarely are contained within a single user workstation, server, or netwo... more Information Systems today rarely are contained within a single user workstation, server, or networked environment. Data can be transparently accessed from any location, and maintained across various network infrastructures. Cloud computing paradigms commoditize the hardware and software environments and allow an enterprise to lease computing resources by the hour, minute, or number of instances required to complete a processing task. An access control policy mediates access requests between authorized users of an information system and the system's resources. Access control policies are defined at any given level of abstraction, such as the file, directory, system, or network, and can be instantiated in layers of increasing (or decreasing) abstraction. For the system end-user, the functional allocation of security policy to discrete system components, or subsystems, may be too complex for comprehension. In this dissertation, the concept of a metapolicy, or policy that governs ex...
“Let Me Tell You What I Want ” – Security Policy Elicitation Through Computational Narration
A system security policy is subject to considerable interpretation. What to the end user may be a... more A system security policy is subject to considerable interpretation. What to the end user may be a perfectly reasonable access control policy may be impossible to architect into an enforceable policy implementation. The earlier such policy disconnect can be found, the less severe the impact on the system design, cost, and schedule. This paper discusses the use of computational narrative, or computer-assisted storytelling, as a method for eliciting the access control policy associated with a given information system. Similarities in the structure between computational narration and access control models are presented, as are attempts to apply computational narration in similar domains. Finally, a research project is proposed to determine the feasibility of computational narration as an access control modeling technique.
A system security policy is often perceived as a set of mandatory requirements levied upon the sy... more A system security policy is often perceived as a set of mandatory requirements levied upon the system by an organizational directive or Information System Security Officer (ISSO). To the user, these security requirements may bear little resemblance to his actual working system security policy, which controls data modification and user privileges. In the course of reengineering business processes and
: For the past two years, Harris Corporation has been conducting research for the U.S. Air Force ... more : For the past two years, Harris Corporation has been conducting research for the U.S. Air Force Research Laboratory under the Network Vulnerability Tool (NVT) Study. The Network Vulnerability Tool concept develops and applies a single topological system model. This model supports the information needs of multiple vulnerability analysis tools using an integrated knowledge solicitation and translation framework. As part of this effort, vulnerability tools from COTS, GOTS, and research laboratory sources were surveyed, and a representative sample tool collection was selected for inclusion in the NVT prototype. The prototype integrates and interactively applies multiple existing vulnerability assessment technologies, resulting in a cohesive, combined vulnerability/risk assessment. The combined risk assessment provides a readily comprehensible picture of the risk posture, assisting the analyst in the definition of an acceptable risk posture for an operational system or preliminary system d...
36th Annual Hawaii International Conference on System Sciences, 2003. Proceedings of the
The term " assurance" has been used for decades in trusted system development as an expression of... more The term " assurance" has been used for decades in trusted system development as an expression of confidence that one has in the strength of mechanisms or countermeasures. One of the unsolved problems of security engineering is the adoption of measures or metrics that can reliably depict the assurance associated with a specific hardware and software system. This paper reports on a recent attempt to focus requirements in this area by examining those currently in use. It then suggests a categorization of Information Assurance (IA) metrics that may be tailored to an organization's needs 1. We believe that the provision of security mechanisms in systems is a subset of the systems engineering discipline having a large software-engineering correlation. There is general agreement that no single system metric or any "one-prefect" set of IA metrics applies across all systems or audiences. The set most useful for an organization largely depends on their IA goals, their technical, organizational and operational needs, and the financial, personnel, and technical resources that are available.
Proceedings of the 1999 workshop on New security paradigms - NSPW '99
A popular business paradigm for information systems treats the information infrastructure as a co... more A popular business paradigm for information systems treats the information infrastructure as a corporate utility. In this model, a fixed Total Cost of Ownership (TCO) is associated with a given workstation, the network infrastructure, user applications, and personnel required for operational support. Related to the TCO model is the Seat Management model, which exploits the economies of standardization and scale to reduce information technology expenses. In both of these models, a defined, measurable, service level is applied as a cost metric, For example, seven days per week, twenty-four hour help desk support is more costly than five clays per week, business hours support. These measurable service levels are defined as Service Level Agreements. Few security services have been specified in terms that are amenable to Service Level Agreements. This raises the question-can security be adequately expressed in a Service Level Agreement context. This paper looks at a derivation of security related service level agreements for a large enterprise. The possible applications of this approach are presented, as is a discussion of the caveats an information technology organization should consider prior to adopting security service level agreements. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. To copy otherwise, to republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee.
Sensor fusion and automatic vulnerability analysis
Security analysis of networked computing systems continues to present a challenge. The growing co... more Security analysis of networked computing systems continues to present a challenge. The growing complexity of network and computing systems, the increasing sophistication of computer attacks, and the limited supply of security specialist make automated security solutions a necessity. A number of independent solutions are often suggested for a system and then implemented as independent sensors. Little work has been done in fusing sensor outputs in a meaningful way in order to recognize an attack in progress in time to mitigate its impact.
Proceedings of the Seventh International Conference on Enterprise Information Systems
An access control policy mediates access between authorized users of a computer system and system... more An access control policy mediates access between authorized users of a computer system and system resources. Access control policies are defined at a given level of abstraction, such as the file, directory, system, or network, and can be instantiated in layers of increasing (or decreasing) abstraction. In this paper, the concept of a metapolicy, or policy that governs execution of subordinate security policies, is introduced. The metapolicy provides a method to communicate updated higher level policy information to all components of a system; it minimizes the overhead associated with access control decisions by making access decisions at the highest level possible in the policy hierarchy. This paper discusses how metapolicies are defined and how they relate to other access control mechanisms. The rationale for revisiting metapolicies as an access control option for federated enterprise architectures is presented, and a framework for further research in metapolicy use as a context based access control representation is described.
2003 Symposium on Applications and the Internet Workshops, 2003. Proceedings.
Wireless access points bring great convenience to the enterprise network, and also bring a large ... more Wireless access points bring great convenience to the enterprise network, and also bring a large collection of vulnerabilities into the enterprise environment. Wireless users pose new difficulties in authentication and confidentiality that can intentionally or inadvertently pose a threat to their wired colleagues. A comprehensive network vulnerability analysis must address wireless environment threats and vulnerabilities, including identification of unauthorized Wireless Access Points and incorrectly configured clients. This paper discusses the issues associated with vulnerability assessment in a wireless network and a recommended approach to integrating wireless devices into vulnerability scanning methodologies.
This paper is constructed on the premise that human belief dependent emotions can be triggered by... more This paper is constructed on the premise that human belief dependent emotions can be triggered by story-telling or narratives. With recent technological advancements to measure neurobiological measurements of the brain, such as functional magnetic resonance imaging (fMRI) and non-invasive brain computing interface (BCI) equipment, these technologies can allow for visualization and data collection of brain activation patterns showing unconsciously controlled responses to narratives or stories. Current game theory application to belief networks has been modeled to help explain observed behavior when material payoffs of others matters to the individual. We discuss a method of how game theory, utilizing communication packet theory, can now be modeled to belief dependent emotions and intentions measured through a new biometric tool correlating neurobiological emotional states and responses.
For the past two years, Harris Corporation has been conducting research for the U.S. Air Force Re... more For the past two years, Harris Corporation has been conducting research for the U.S. Air Force Research Laboratory under the Network Vulnerability Tool (NVT) Study. The Network Vulnerability Tool concept develops and applies a single topological system model. This model supports the information needs of multiple vulnerability analysis tools using an integrated knowledge solicitation and translation framework. As part of this effort, vulnerability tools from COTS, GOTS, and research laboratory sources were surveyed, and a representative sample tool collection was selected for inclusion in the NVT prototype. The prototype integrates and interactively applies multiple existing vulnerability assessment technologies, resulting in a cohesive, combined vulnerability/risk assessment. The combined risk assessment provides a readily comprehensible picture of the risk posture, assisting the analyst in the definition of an acceptable risk posture for an operational system or preliminary system ...
Designing for Disaster : Building Survivable Information Systems
hen a natural disaster strikes, a corporation normally places a disaster recovery plan into effec... more hen a natural disaster strikes, a corporation normally places a disaster recovery plan into effect. These plans define how a corporate knowledge base is reconstituted after a catastrophic failure, allowing an enterprise to continue its daily functions. However, natural disasters are relatively rare occurrences. A corporation that leases space at a site hosting facility and purchases disruption insurance has allocated assets in advance, with potentially no return on those investments if a disaster does not occur [1]. In this regard, disaster recovery is like insurance. With the ubiquity of the Internet, it has become more difficult to disrupt services for an extended period of time. Consumers expect 24-hour service or they take their Internet shopping elsewhere. Global enterprises now link what were isolated data centers to Enterprise Resource Planning systems to manage inventory and track consumer preferences. There is no downtime allowed in today's global economy. Enter the con...
were never too busy to very patiently answer my never-ending questions. Blaine Burnham helped sha... more were never too busy to very patiently answer my never-ending questions. Blaine Burnham helped shape my initial dissertation subject, and Rayford Vaughn convinced me that solving world peace was a noble thought but not the answer to a survivable dissertation. Richard Ford became the voice of urgency, as he consistently and patiently inquired about my progress. Joe Gulla helped me clarify the interrelationship between traditional requirements and security requirements. James Cannady let me take the path less traveled as I worked through the cognitive neurosciences and computer assisted narrative technologies to fuse the concepts into my dissertation research. My co-workers and peers offered more words of encouragement than I ever thought I would need: their inquiries of "are you done yet?" and patient endurance when I described why I was still working on it kept me moving in the right direction. They may not have understood it, but they understood it was my passion. My parents, Ronald and Julia, instilled my curiosity and love of learning at an early age. They never discouraged my studies and taught me that hard work would eventually pay off. For all the papers they reviewed and trips to the library over the years: Thank You. My siblings, Julia, Gloria, and Ronald, were always there to remind me that family weighed in balance with studies. Finally, none of it would ever have happened without the enduring love and patience of my late husband, Steven Eric Rose, who did not live to see the completion of this milestone. Steven encouraged my goals and did his best to push me along the way to fulfill my dreams. He never complained about my hours of research work, or my professional obligations. Without his love, support and devotion I would have never made it this far.
Uploads
Papers by Ronda Henning