International Journal of Computer Science Issues

More than a traditional journal...

Nowadays, information systems are becoming a vital and strategic component of any organization. However, in most cases, these systems are designed and implemented without taking into consideration security aspects. To ensure a certain level of security, the behavior of a system must be controlled by a security policy. The objective of this work is: Given a system S and a security policy P how can we generate a system Sp which is a secure version of S? Based on the fact that a security policy is a set of rules, we propose an approach to build an automaton modeling a security policy. Then we propose an approach for modeling a system with the same formalism. Finally, we suggest a composition model of a system with a security policy. The suggested approach is illustrated using a firewall security policy and a distributed system consisting of network elements (servers, workstations,...).