Aragorn: Eliciting and Maintaining Secure Service Policies

Nirav Ajmeri, Chung-Wei Hang, Simon Parsons, Munindar P. Singh

Research output: Contribution to journalArticlepeer-review

201 Downloads (Pure)

Abstract

Services today are configured through policies that capture expected behaviors. However, because of subtle and changing stakeholder requirements, producing and maintaining policies is nontrivial. Policy errors are surprisingly common and cause avoidable security vulnerabilities.

We propose Aragorn, an approach that applies formal argumentation to produce policies that balance stakeholder concerns. We demonstrate empirically that, compared to the traditional approach for specifying policies, Aragorn performs (1) better on coverage, correctness, and quality; (2) equally well on learnability and effort÷coverage and difficulty; and (3) slightly worse on time and effort needed. Thus, Aragorn demonstrates the potential for capturing policy rationales as arguments.
Original languageEnglish
JournalCOMPUTER
Publication statusAccepted/In press - 24 Jan 2017

Fingerprint

Dive into the research topics of 'Aragorn: Eliciting and Maintaining Secure Service Policies'. Together they form a unique fingerprint.

Cite this