Consiglio Nazionale delle Ricerche

Tipo di prodottoArticolo in rivista
TitoloSemiautomated Verification of Access Control Implementation in Industrial Networked Systems
Anno di pubblicazione2015
Formato
  • Elettronico
  • Cartaceo
Autore/iM. Cheminod, L. Durante, L. Seno, A. Valenzano
Affiliazioni autoriIEIIT-CNR, Istituto di Elettronica e di Ingegneria dell'Informazione e delle Telecomunicazioni, Torino, Italy
Autori CNR e affiliazioni
  • LUCA DURANTE
  • LUCIA SENO
  • MANUEL CHEMINOD
  • ADRIANO VALENZANO
Lingua/e
  • inglese
AbstractAccess control is a necessary building block in the security of any kind of cyber system and, in this sense, industrial networked systems (INSs) make no exception. Typically, access control policies are specified at a high implementation-independent level of abstraction and then mapped onto the real system by leveraging available policy enforcement mechanisms. Unfortunately, different from general-purpose ICT systems, enforcement mechanisms are generally very basic in INS. As a consequence, verifying the correctness of policy implementation becomes a crucial task, especially cumbersome when it needs to be carried out entirely by hand. This paper presents a new methodology, which also serves as the basis of a purposely developed software tool conceived to cope with the lack of policy enforcement mechanisms in INS and to allow semiautomatic verification of policy implementation. Our approach is based on a twofold system model that enables both the abstract specification of access control policies and the detailed description of the target physical system. These two separate views are then combined to automatically determine whether the current system implementation matches the policy specification.
Lingua abstractinglese
Altro abstract-
Lingua altro abstract-
Pagine da1388
Pagine a1399
Pagine totali12
RivistaIEEE transactions on industrial informatics (Online)
Attiva dal 2005
Editore: Institute of Electrical and Electronics Engineers, - Piscataway, NJ
Paese di pubblicazione: Stati Uniti d'America
Lingua: inglese
ISSN: 1941-0050
Titolo chiave: IEEE transactions on industrial informatics (Online)
Titolo proprio: IEEE transactions on industrial informatics (Online)
Titolo abbreviato: IEEE trans. industr. inform. (Online)
Titoli alternativi:
  • Institute of Electrical and Electronics Engineers transactions on industrial informatics (Online)
  • Transactions on industrial informatics (Online)
Numero volume della rivista11
Fascicolo della rivista6
DOI10.1109/TII.2015.2489181
Verificato da refereeSì: Internazionale
Stato della pubblicazionePublished version
Indicizzazione (in banche dati controllate)-
Parole chiaveaccess control, industrial systems security, RBAC, automated analysis
Link (URL, URI)http://ieeexplore.ieee.org/xpl/articleDetails.jsp?arnumber=7295628&filter%3DAND%28p_IS_Number%3A7343788%29
Titolo parallelo-
Data di accettazione-
Note/Altre informazioni-
Strutture CNR
  • IEIIT — Istituto di elettronica e di ingegneria dell'informazione e delle telecomunicazioni
Moduli CNR
  • ICT.P07.004.001 : Reti e Protocolli per l'Automazione ed il Controllo di Processo
Progetti Europei-
Allegati
Semiautomated Verification of Access Control Implementation in Industrial Networked Systems (documento privato )
Tipo documento: application/pdf