Modelling Uncertain and Time-Dependent Security Labels in MLS Systems

J.A. Clark; J.E. Tapiador; J. McDermid; P.C. Cheng; D. Agrawal; N. Ivanic; D. Slogget

doi:10.1007/978-3-642-25206-8_10

Modelling Uncertain and Time-Dependent Security Labels in MLS Systems

J.A. Clark, J.E. Tapiador, J. McDermid, P.C. Cheng, D. Agrawal, N. Ivanic, D. Slogget

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Traditional multi-level security (MLS) systems associate security clearances with subjects, security classifications with objects, and provide a clear decision mechanism as to whether an access request should be granted or not. Many organisations, especially those in the national security and intelligence arena, are increasingly viewing the inflexibility of such models as a major inhibitor for missions where there is a need to rapidly process, share and disseminate large quantities of sensitive information. One reason for such inflexibility is the fact that subject and object labels are fixed assessments of sensitivity, whereas in practice there will inevitably be some uncertainty about the potential damage caused if a document falls into the wrong hands. Furthermore, the operational reality of many modern systems dictates a temporal element to the actual sensitivity of an object. In this paper we propose to model both security labels and clearances as time-varying probability distributions. We provide practical templates to model both uncertainty and temporally characterised dependencies, and show how these features can be naturally integrated into an access control framework based on quantified risk.

Original language	English
Title of host publication	e-Business and Telecommunications
Subtitle of host publication	7th International Joint Conference, ICETE 2010, Athens, Greece, July 26-28, 2010, Revised Selected Papers
Publisher	Springer
Pages	158-171
Number of pages	14
ISBN (Electronic)	978-3-642-25206-8
ISBN (Print)	978-3-642-25205-1
DOIs	https://doi.org/10.1007/978-3-642-25206-8_10
Publication status	Published - 2012

Publication series

Name	Communications in Computer and Information Science
Publisher	Springer
Volume	222
ISSN (Print)	1865-0929

Access to Document

10.1007/978-3-642-25206-8_10

http://link.springer.com/content/pdf/10.1007%2F978-3-642-25206-8_10.pdf

Cite this

Clark, J. A., Tapiador, J. E., McDermid, J., Cheng, P. C., Agrawal, D., Ivanic, N., & Slogget, D. (2012). Modelling Uncertain and Time-Dependent Security Labels in MLS Systems. In e-Business and Telecommunications : 7th International Joint Conference, ICETE 2010, Athens, Greece, July 26-28, 2010, Revised Selected Papers (pp. 158-171). (Communications in Computer and Information Science ; Vol. 222). Springer. https://doi.org/10.1007/978-3-642-25206-8_10

@inproceedings{1eba2231fedc4a27a88d74ab09aaf44f,

title = "Modelling Uncertain and Time-Dependent Security Labels in MLS Systems",

abstract = "Traditional multi-level security (MLS) systems associate security clearances with subjects, security classifications with objects, and provide a clear decision mechanism as to whether an access request should be granted or not. Many organisations, especially those in the national security and intelligence arena, are increasingly viewing the inflexibility of such models as a major inhibitor for missions where there is a need to rapidly process, share and disseminate large quantities of sensitive information. One reason for such inflexibility is the fact that subject and object labels are fixed assessments of sensitivity, whereas in practice there will inevitably be some uncertainty about the potential damage caused if a document falls into the wrong hands. Furthermore, the operational reality of many modern systems dictates a temporal element to the actual sensitivity of an object. In this paper we propose to model both security labels and clearances as time-varying probability distributions. We provide practical templates to model both uncertainty and temporally characterised dependencies, and show how these features can be naturally integrated into an access control framework based on quantified risk.",

author = "J.A. Clark and J.E. Tapiador and J. McDermid and P.C. Cheng and D. Agrawal and N. Ivanic and D. Slogget",

year = "2012",

doi = "10.1007/978-3-642-25206-8_10",

language = "English",

isbn = "978-3-642-25205-1",

series = "Communications in Computer and Information Science ",

publisher = "Springer",

pages = "158--171",

booktitle = "e-Business and Telecommunications",

address = "Germany",

}

Clark, JA, Tapiador, JE, McDermid, J, Cheng, PC, Agrawal, D, Ivanic, N & Slogget, D 2012, Modelling Uncertain and Time-Dependent Security Labels in MLS Systems. in e-Business and Telecommunications : 7th International Joint Conference, ICETE 2010, Athens, Greece, July 26-28, 2010, Revised Selected Papers. Communications in Computer and Information Science , vol. 222, Springer, pp. 158-171. https://doi.org/10.1007/978-3-642-25206-8_10

Modelling Uncertain and Time-Dependent Security Labels in MLS Systems. / Clark, J.A.; Tapiador, J.E.; McDermid, J. et al.
e-Business and Telecommunications : 7th International Joint Conference, ICETE 2010, Athens, Greece, July 26-28, 2010, Revised Selected Papers. Springer, 2012. p. 158-171 (Communications in Computer and Information Science ; Vol. 222).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Modelling Uncertain and Time-Dependent Security Labels in MLS Systems

AU - Clark, J.A.

AU - Tapiador, J.E.

AU - McDermid, J.

AU - Cheng, P.C.

AU - Agrawal, D.

AU - Ivanic, N.

AU - Slogget, D.

PY - 2012

Y1 - 2012

N2 - Traditional multi-level security (MLS) systems associate security clearances with subjects, security classifications with objects, and provide a clear decision mechanism as to whether an access request should be granted or not. Many organisations, especially those in the national security and intelligence arena, are increasingly viewing the inflexibility of such models as a major inhibitor for missions where there is a need to rapidly process, share and disseminate large quantities of sensitive information. One reason for such inflexibility is the fact that subject and object labels are fixed assessments of sensitivity, whereas in practice there will inevitably be some uncertainty about the potential damage caused if a document falls into the wrong hands. Furthermore, the operational reality of many modern systems dictates a temporal element to the actual sensitivity of an object. In this paper we propose to model both security labels and clearances as time-varying probability distributions. We provide practical templates to model both uncertainty and temporally characterised dependencies, and show how these features can be naturally integrated into an access control framework based on quantified risk.

AB - Traditional multi-level security (MLS) systems associate security clearances with subjects, security classifications with objects, and provide a clear decision mechanism as to whether an access request should be granted or not. Many organisations, especially those in the national security and intelligence arena, are increasingly viewing the inflexibility of such models as a major inhibitor for missions where there is a need to rapidly process, share and disseminate large quantities of sensitive information. One reason for such inflexibility is the fact that subject and object labels are fixed assessments of sensitivity, whereas in practice there will inevitably be some uncertainty about the potential damage caused if a document falls into the wrong hands. Furthermore, the operational reality of many modern systems dictates a temporal element to the actual sensitivity of an object. In this paper we propose to model both security labels and clearances as time-varying probability distributions. We provide practical templates to model both uncertainty and temporally characterised dependencies, and show how these features can be naturally integrated into an access control framework based on quantified risk.

UR - http://www.scopus.com/inward/record.url?scp=84857620663&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-25206-8_10

DO - 10.1007/978-3-642-25206-8_10

M3 - Conference contribution

SN - 978-3-642-25205-1

T3 - Communications in Computer and Information Science

SP - 158

EP - 171

BT - e-Business and Telecommunications

PB - Springer

ER -

Clark JA, Tapiador JE, McDermid J, Cheng PC, Agrawal D, Ivanic N et al. Modelling Uncertain and Time-Dependent Security Labels in MLS Systems. In e-Business and Telecommunications : 7th International Joint Conference, ICETE 2010, Athens, Greece, July 26-28, 2010, Revised Selected Papers. Springer. 2012. p. 158-171. (Communications in Computer and Information Science ). doi: 10.1007/978-3-642-25206-8_10

Modelling Uncertain and Time-Dependent Security Labels in MLS Systems

Abstract

Publication series

Access to Document

Other files and links

Cite this