TelematiV1, Main, Exploration, bibRecord, 000A73

Formal approach to security metrics. What does “more secure” mean for you?∗

Identifieur interne : 000A73 ( Main/Exploration ); précédent : 000A72; suivant : 000A74

Formal approach to security metrics. What does “more secure” mean for you?∗

Auteurs : Leanid Krautsevich [France, Italie] ; Fabio Martinelli [Italie] ; Artsiom Yautsiukhin [Italie]

Source :

RBID : Hal:inria-00536758

Abstract

Security metrics are the tools for providing correct and upto- date information about a state of security. This information is essential for managing security efficiently. Although a number of security metrics were proposed we still need reliable ways for assessment of security. First of all, we do not have a widely-accepted and unambiguous definition which defines what it means that one system is more secure than another one. Without this knowledge we cannot show that a metric really measures security. Second, there is no a universal formal model for all metrics which can be used for rigourous analysis. In this paper we investigate how we can define “more secure” relation and propose our basic formal model for a description and analysis of security metrics.

Url:

https://hal.inria.fr/inria-00536758

Affiliations:

Links toward previous steps (curation, corpus...)

to stream Hal, to step Corpus: 000062
to stream Hal, to step Curation: 000062
to stream Hal, to step Checkpoint: 000096
to stream Main, to step Merge: 000A74
to stream Main, to step Curation: 000A73

Le document en format XML

<record><TEI><teiHeader><fileDesc><titleStmt><title xml:lang="en">Formal approach to security metrics. What does “more secure” mean for you?∗</title>
<author><name sortKey="Krautsevich, Leanid" sort="Krautsevich, Leanid" uniqKey="Krautsevich L" first="Leanid" last="Krautsevich">Leanid Krautsevich</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-133075" status="INCOMING"><orgName>department of computer science</orgName>
<desc><address><country key="FR"></country>
</address>
</desc>
<listRelation><relation active="#struct-301339" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-301339" type="direct"><org type="institution" xml:id="struct-301339" status="VALID"><orgName>Università di Pisa</orgName>
<desc><address><addrLine>Università di PisaLungarno Pacinotti 4356126 Pisa</addrLine>
<country key="IT"></country>
</address>
<ref type="url">https://www.unipi.it/index.php/english</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>France</country>
<placeName><settlement type="city">Pise</settlement>
<region type="region" nuts="2">Toscane</region>
</placeName>
<country>Italie</country>
<orgName type="university">Université de Pise</orgName>
</affiliation>
</author>
<author><name sortKey="Martinelli, Fabio" sort="Martinelli, Fabio" uniqKey="Martinelli F" first="Fabio" last="Martinelli">Fabio Martinelli</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
<author><name sortKey="Yautsiukhin, Artsiom" sort="Yautsiukhin, Artsiom" uniqKey="Yautsiukhin A" first="Artsiom" last="Yautsiukhin">Artsiom Yautsiukhin</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
</titleStmt>
<publicationStmt><idno type="wicri:source">HAL</idno>
<idno type="RBID">Hal:inria-00536758</idno>
<idno type="halId">inria-00536758</idno>
<idno type="halUri">https://hal.inria.fr/inria-00536758</idno>
<idno type="url">https://hal.inria.fr/inria-00536758</idno>
<date when="2010-07-15">2010-07-15</date>
<idno type="wicri:Area/Hal/Corpus">000062</idno>
<idno type="wicri:Area/Hal/Curation">000062</idno>
<idno type="wicri:Area/Hal/Checkpoint">000096</idno>
<idno type="wicri:explorRef" wicri:stream="Hal" wicri:step="Checkpoint">000096</idno>
<idno type="wicri:Area/Main/Merge">000A74</idno>
<idno type="wicri:Area/Main/Curation">000A73</idno>
<idno type="wicri:Area/Main/Exploration">000A73</idno>
</publicationStmt>
<sourceDesc><biblStruct><analytic><title xml:lang="en">Formal approach to security metrics. What does “more secure” mean for you?∗</title>
<author><name sortKey="Krautsevich, Leanid" sort="Krautsevich, Leanid" uniqKey="Krautsevich L" first="Leanid" last="Krautsevich">Leanid Krautsevich</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-133075" status="INCOMING"><orgName>department of computer science</orgName>
<desc><address><country key="FR"></country>
</address>
</desc>
<listRelation><relation active="#struct-301339" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-301339" type="direct"><org type="institution" xml:id="struct-301339" status="VALID"><orgName>Università di Pisa</orgName>
<desc><address><addrLine>Università di PisaLungarno Pacinotti 4356126 Pisa</addrLine>
<country key="IT"></country>
</address>
<ref type="url">https://www.unipi.it/index.php/english</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>France</country>
<placeName><settlement type="city">Pise</settlement>
<region type="region" nuts="2">Toscane</region>
</placeName>
<country>Italie</country>
<orgName type="university">Université de Pise</orgName>
</affiliation>
</author>
<author><name sortKey="Martinelli, Fabio" sort="Martinelli, Fabio" uniqKey="Martinelli F" first="Fabio" last="Martinelli">Fabio Martinelli</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
<author><name sortKey="Yautsiukhin, Artsiom" sort="Yautsiukhin, Artsiom" uniqKey="Yautsiukhin A" first="Artsiom" last="Yautsiukhin">Artsiom Yautsiukhin</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
</analytic>
</biblStruct>
</sourceDesc>
</fileDesc>
<profileDesc><textClass></textClass>
</profileDesc>
</teiHeader>
<front><div type="abstract" xml:lang="en">Security metrics are the tools for providing correct and upto- date information about a state of security. This information is essential for managing security efficiently. Although a number of security metrics were proposed we still need reliable ways for assessment of security. First of all, we do not have a widely-accepted and unambiguous definition which defines what it means that one system is more secure than another one. Without this knowledge we cannot show that a metric really measures security. Second, there is no a universal formal model for all metrics which can be used for rigourous analysis. In this paper we investigate how we can define “more secure” relation and propose our basic formal model for a description and analysis of security metrics.</div>
</front>
</TEI>
<affiliations><list><country><li>France</li>
<li>Italie</li>
</country>
<region><li>Toscane</li>
</region>
<settlement><li>Pise</li>
</settlement>
<orgName><li>Université de Pise</li>
</orgName>
</list>
<tree><country name="France"><region name="Toscane"><name sortKey="Krautsevich, Leanid" sort="Krautsevich, Leanid" uniqKey="Krautsevich L" first="Leanid" last="Krautsevich">Leanid Krautsevich</name>
</region>
</country>
<country name="Italie"><noRegion><name sortKey="Martinelli, Fabio" sort="Martinelli, Fabio" uniqKey="Martinelli F" first="Fabio" last="Martinelli">Fabio Martinelli</name>
</noRegion>
<name sortKey="Yautsiukhin, Artsiom" sort="Yautsiukhin, Artsiom" uniqKey="Yautsiukhin A" first="Artsiom" last="Yautsiukhin">Artsiom Yautsiukhin</name>
</country>
</tree>
</affiliations>
</record>

Pour manipuler ce document sous Unix (Dilib)

EXPLOR_STEP=$WICRI_ROOT/Ticri/CIDE/explor/TelematiV1/Data/Main/Exploration

HfdSelect -h $EXPLOR_STEP/biblio.hfd -nk 000A73 | SxmlIndent | more

HfdSelect -h $EXPLOR_AREA/Data/Main/Exploration/biblio.hfd -nk 000A73 | SxmlIndent | more

Pour mettre un lien sur cette page dans le réseau Wicri

{{Explor lien
   |wiki=    Ticri/CIDE
   |area=    TelematiV1
   |flux=    Main
   |étape=   Exploration
   |type=    RBID
   |clé=     Hal:inria-00536758
   |texte=   Formal approach to security metrics. What does “more secure” mean for you?∗
}}

This area was generated with Dilib version V0.6.31.
Data generation: Thu Nov 2 16:09:04 2017. Site generation: Sun Mar 10 16:42:28 2024

	Serveur d'exploration sur la télématique
	Attention, ce site est en cours de développement ! Attention, site généré par des moyens informatiques à partir de corpus bruts. Les informations ne sont donc pas validées.

Serveur d'exploration sur la télématique

Formal approach to security metrics. What does “more secure” mean for you?∗

Formal approach to security metrics. What does “more secure” mean for you?∗

Source :

Abstract

Links toward previous steps (curation, corpus...)

Le document en format XML

Pour manipuler ce document sous Unix (Dilib)

Pour mettre un lien sur cette page dans le réseau Wicri