A Service Dependency Modeling Framework for Policy-Based Response Enforcement

摘要: The use of dynamic access control policies for threat response adapts local decisions to high level system constraints. However, security are often carefully tightened during design-time, and the large number service dependencies in a architecture makes their adaptation difficult. enforcement single rule requires performing multiple configuration changes on services. This paper formally describes Service Dependency Framework (SDF) order assist process selecting policy points (PEPs) capable applying rule. It automatically derives elementary rules from generic control, either allowed or denied by policy, so they can be locally managed PEPs. SDF introduces /provides model dependencies. models modular way, thus provides both extensibility reusability components. is defined using Architecture Analysis Design Language, which formal concepts modeling architectures. presents systematic treatment dependency aims apply while minimizing reducing resource consumption.