Automated Security Management

Description

In this contributed volume, leading international researchers explore configuration modeling and checking, vulnerability and risk assessment, configuration analysis, and diagnostics and discovery. The authors equip readers to understand automated security management systems and techniques that increase overall network assurability and usability. These constantly changing networks defend against cyber attacks by integrating hundreds of security devices such as firewalls, IPSec gateways, IDS/IPS, authentication servers, authorization/RBAC servers, and crypto systems. Automated Security Management presents a number of topics in the area of configuration automation. Early in the book, the chapter authors introduce modeling and validation of configurations based on high-level requirements and discuss how to manage the security risk as a result of configuration settings of network systems. Later chapters delve into the concept of configuration analysis and why it is important in ensuring the security and functionality of a properly configured system. The book concludes with ways to identify problems when things go wrong and more. A wide range of theoretical and practical content make this volume valuable for researchers and professionals who work with network systems. Front Matter....Pages i-viii Front Matter....Pages 1-1 Towards a Unified Modeling and Verification of Network and System Security Configurations....Pages 3-19 Modeling and Checking the Security of DIFC System Configurations....Pages 21-38 Front Matter....Pages 39-39 Increasing Android Security Using a Lightweight OVAL-Based Vulnerability Assessment Framework....Pages 41-58 A Declarative Logic-Based Approach for Threat Analysis of Advanced Metering Infrastructure....Pages 59-77 Risk Based Access Control Using Classification....Pages 79-95 Front Matter....Pages 97-97 GCNav: Generic Configuration Navigation System....Pages 99-117 The Right Files at the Right Time....Pages 119-133 Rule Configuration Checking in Secure Cooperative Data Access....Pages 135-149 Front Matter....Pages 151-151 Programmable Diagnostic Network Measurement with Localization and Traffic Observation....Pages 153-167 Discovery of Unexpected Services and Communication Paths in Networked Systems....Pages 169-178 Tracing Advanced Persistent Threats in Networked Systems....Pages 179-187