Formal Specification of Common Criteria Based Access Control Policy Model

Manpreet Singh ； Manjeet S. Patterh

《International Journal of Network Security》 11卷3期 (2010/11) Pp. 139-148

https://doi.org/10.6633/IJNS.201011.11(3).03

並列摘要

One of the major threats that an enterprise Information system networks are facing today is the Insider threat. As part of the Insider Threat study, lack of an effective access control mechanism is identified as one of the major causes that facilitated IT sabotage. In this paper we propose a network access control meta model as per ISO/IEC security evaluation criteria-Common Criteria to provide a framework for implementing an Insider threat protection security solution for network computing environment. We used formal specification notation language Z to specify the proposed model. The paper concludes with a case study along with model verification.

並列關鍵字

Access control ； evaluation criteria ； formal methods ； security policy model