Achieving Interoperability in a Multiple-Security- Policies Environment
Computers & SecurityPublished 1 March 2000
Spyros Kokolakis, Evangelos Kiountouzis
Citations20
SJR quartileQ1
SJR score1.45
SNIP2.27
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
It is argued that a policy repository may serve as the basic component of a software tool for the management of multiple security policies and the application of the Metapolicy Development System, which is implemented in Telos, an object-oriented knowledge representation language.
Abstract
The interoperability problems that emerge when information systems cooperate, are often attributed to incompatible security policies. In this paper, we introduce a systemic framework for achieving interoperability when multiple security policies are employed. First, we present a Metapolicy Development System (MDS) for the resolution of interoperability problems caused by incompatible security policies. Then we provide a policy framework and a metapolicy framework to serve as conceptual devices in the application of the MDS. Finally, we examine the possibility of developing software tools to support the MDS. We argue that a policy repository may serve as the basic component of a software tool for the management of multiple security policies and the application of the MDS. The policy repository is implemented in Telos, an object-oriented knowledge representation language.
Keywords
Computer ScienceSocial Sciences
Contemporary Sociology A Journal of ReviewsThe New Competition: Institutions of Industrial Restructuring.
968 Citations1991Neil Fligstein, Michael H. Best
The Chinese Wall security policy
882 Citations2003David Brewer, Mike Nash
The authors explore a commercial security policy (the Chinese Wall) which represents the behavior required of those persons who perform corporate analysis for financial institutions and concludes that it is perhaps as significant to the financial world as Bell-LaPadula's policies are to the military.
ACM Transactions on Information SystemsTelos: representing knowledge about information systems
787 Citations1990John Mylopoulos, Alex Borgida +2 more
Telos is a language intended to support the development of information systems based on the premise that information system development is knowledge intensive and that the primary responsibility of any language intended for the task is to be able to formally represent the relevent knowledge.
Communications of the ACMVirtual organization
477 Citations1997Abbe Mowshowitz
This introduction has three aims: show that virtual organization captures the essential features of the disparate virtual constructs; describe its potential advantages, limitations, and prerequisites in business organizations; and indicate the types and range of problems that can be solved through virtual organization.
ACM Transactions on Database SystemsAutomated resolution of semantic heterogeneity in multidatabases
219 Citations1994M. W. Bright, Ali R. Hurson +1 more
The Summary Schemas Model (SSM) is proposed as an extension to multidatabase systems to aid in semantic identification and a simulation of the SSM is presented to compare imprecise-query processing with corresponding query-processing costs in a standard multid atabase system.
DSpace@MIT (Massachusetts Institute of Technology)Context Interchange: Overcoming the Challenges of Large-Scale Interoperable Database Systems in a Dynamic Environment
150 Citations2011Cheng Hian Goh, Stuart Madnick +1 more
European Journal of Information SystemsStructures of responsibility and security of information systems
131 Citations1996Judy Backhouse, Gurpreet Dhillon
It is argued that an analysis of structures of responsibility in organizations leads to the development of secure information systems and an improved theoretical and conceptual foundation for analysing information systems security is suggested.
International Journal of Information ManagementInformation systems and systems thinking: Time to unite?
122 Citations1988Peter Checkland
The notion of 'information system' is examined particularly from the perspective that those concerned with such 'systems' might learn something from the whole body of ideas concerned with the notion 'system'.
Choice Reviews OnlineCybercorp: the new business revolution
97 Citations1997
In cybercorp: the new business revolution, James Martin synthesizes a lifetime of research, experience, and thinking into the most accessible, hard-hitting, and visionary book he has ever produced.
Medical Entomology and ZoologyClient-Led Design: A Systemic Approach to Information System Definition
59 Citations1995Frank Stowell, Duane West
Context interchange
57 Citations1994Cheng Hian Goh, Stuart Madnick +1 more
The problem of receiver heterogeneity, scalability, and evolution which have received little attention in the literature are highlighted, and an overview of the Context Interchange approach to interoperability is provided, illustrating why this is able to better circumvent the problems identified and suggesting how the context interchange framework differs from other integration approaches in the Literature.
The multipolicy paradigm for trusted systems
35 Citations1993Hilary H. Hosmer
This paper describes shortcomings in the current paradigm for multilevel secure (MLS) systems, summarizes requirements for a.11 a.lt,ernat,e pamdigm, and describes the Multipolicy Paradigm, which is useful wheuever there are multiple security goals such as confident.
Computers & SecurityThe role of information security in corporate governance
27 Citations1996Ken Lindup
The SFA should have the right to require senior executives to justify their conduct and competence in the event of a management failure which is so serious that it threatens the future of the firm as a regulated entity.
Automated Software EngineeringIntegrating specifications: A similarity reasoning approach
24 Citations1995George Spanoudakis, Panos Constantopoulos
This paper proposes an approach to their detection using meta-modeling and similarity analysis, which accommodates different models for representing specifications, and analysis scales up to manage large, complex specification because the complexity of similarity analysis is polynomial.
IFIP advances in information and communication technology“Comprehensive Information Technology Security”: A New Approach to Respond Ethical and Social Issues Surrounding Information Security in the 21st Century
22 Citations1995Anja Hartmann
Up to now, the information technology security (IT-security) has been seen as a mainly technical problem, but nearly nobody has been thinking about the social and ethical dimension of IT-Security.
ACM SIGMOD RecordOn the semantic equivalence of heterogeneous representations in multimodel multidatabase systems
16 Citations1991Dipayan Gangopadhyay
An extensible metalevel system, called M(DM), in which the syntax and the semantics of data models, schemas, and databases can be uniformly described and the semantic equivalence (or lack thereof) of symbols across different reresentation systems is derived.
Information Management & Computer SecurityDistributed component software security issues on deploying a secure electronic marketplace
6 Citations2000Stefanos Gritzalis, John Iliadis +1 more
The security models of each architecture are described and their efficiency and flexibility are evaluated in a comparative manner and upcoming extensions are discussed.
IFIP advances in information and communication technologyAn analyst’s view of IS security
6 Citations1996Evangelos Kiountouzis, Spyros Kokolakis
It is argued that when addressing the IS Security problem a synthesis of the above is needed and that there is evidence that a shift paradigm process is taking place.