ITEM METADATA RECORD
Title: Deploy, adjust and readjust: Supporting dynamic reconfiguration of policy enforcement
Authors: Gheorghe, Gabriela
Crispo, Bruno
Carbone, Roberto
Desmet, Lieven
Joosen, Wouter
Issue Date: 12-Dec-2011
Publisher: IFIP/Springer
Host Document: ACM/IFIP/USENIX 12th International Middleware Conference vol:7049 pages:350-369
Series Title: Lecture Notes in Computer Science
Conference: Middleware edition:12 location:Lisboa, Portugal date:12-16 December 2011
Abstract: For large distributed applications, security and performance are two requirements often difficult to satisfy together. Addressing them separately leads more often to fast systems with security holes, rather than secure systems with poor performance. For instance, caching data needed for security decisions can lead to security violations when the data changes faster than the cache can refresh it. Retrieving such fresh data without caching it impacts performance. In this paper, we analyze a subproblem: how to dynamically configure a distributed authorization system when both security and performance requirements change. We examine data caching, retrieval and correlation, and propose a runtime management tool that, with external input, finds and enacts the customizations that satisfy both security and performance needs. Preliminary results show it takes around two seconds to find customization solutions in a setting with over one thousand authorization components.
ISBN: 8-3-642-25820-6
ISSN: 0302-9743
Publication status: published
KU Leuven publication type: IC
Appears in Collections:Informatics Section

Files in This Item:
File Description Status SizeFormat
enf-mngmt.pdfMain article Accepted 622KbAdobe PDFView/Open

 


All items in Lirias are protected by copyright, with all rights reserved.

© Web of science