Formal approach to security metrics. What does “more secure” mean for you?∗
Identifieur interne : 000A74 ( Main/Merge ); précédent : 000A73; suivant : 000A75Formal approach to security metrics. What does “more secure” mean for you?∗
Auteurs : Leanid Krautsevich [France, Italie] ; Fabio Martinelli [Italie] ; Artsiom Yautsiukhin [Italie]Source :
Abstract
Security metrics are the tools for providing correct and upto- date information about a state of security. This information is essential for managing security efficiently. Although a number of security metrics were proposed we still need reliable ways for assessment of security. First of all, we do not have a widely-accepted and unambiguous definition which defines what it means that one system is more secure than another one. Without this knowledge we cannot show that a metric really measures security. Second, there is no a universal formal model for all metrics which can be used for rigourous analysis. In this paper we investigate how we can define “more secure” relation and propose our basic formal model for a description and analysis of security metrics.
Url:
Links toward previous steps (curation, corpus...)
- to stream Hal, to step Corpus: 000062
- to stream Hal, to step Curation: 000062
- to stream Hal, to step Checkpoint: 000096
Links to Exploration step
Hal:inria-00536758Le document en format XML
<record><TEI><teiHeader><fileDesc><titleStmt><title xml:lang="en">Formal approach to security metrics. What does “more secure” mean for you?∗</title>
<author><name sortKey="Krautsevich, Leanid" sort="Krautsevich, Leanid" uniqKey="Krautsevich L" first="Leanid" last="Krautsevich">Leanid Krautsevich</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-133075" status="INCOMING"><orgName>department of computer science</orgName>
<desc><address><country key="FR"></country>
</address>
</desc>
<listRelation><relation active="#struct-301339" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-301339" type="direct"><org type="institution" xml:id="struct-301339" status="VALID"><orgName>Università di Pisa</orgName>
<desc><address><addrLine>Università di PisaLungarno Pacinotti 4356126 Pisa</addrLine>
<country key="IT"></country>
</address>
<ref type="url">https://www.unipi.it/index.php/english</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>France</country>
<placeName><settlement type="city">Pise</settlement>
<region type="region" nuts="2">Toscane</region>
</placeName>
<country>Italie</country>
<orgName type="university">Université de Pise</orgName>
</affiliation>
</author>
<author><name sortKey="Martinelli, Fabio" sort="Martinelli, Fabio" uniqKey="Martinelli F" first="Fabio" last="Martinelli">Fabio Martinelli</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
<author><name sortKey="Yautsiukhin, Artsiom" sort="Yautsiukhin, Artsiom" uniqKey="Yautsiukhin A" first="Artsiom" last="Yautsiukhin">Artsiom Yautsiukhin</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
</titleStmt>
<publicationStmt><idno type="wicri:source">HAL</idno>
<idno type="RBID">Hal:inria-00536758</idno>
<idno type="halId">inria-00536758</idno>
<idno type="halUri">https://hal.inria.fr/inria-00536758</idno>
<idno type="url">https://hal.inria.fr/inria-00536758</idno>
<date when="2010-07-15">2010-07-15</date>
<idno type="wicri:Area/Hal/Corpus">000062</idno>
<idno type="wicri:Area/Hal/Curation">000062</idno>
<idno type="wicri:Area/Hal/Checkpoint">000096</idno>
<idno type="wicri:explorRef" wicri:stream="Hal" wicri:step="Checkpoint">000096</idno>
<idno type="wicri:Area/Main/Merge">000A74</idno>
</publicationStmt>
<sourceDesc><biblStruct><analytic><title xml:lang="en">Formal approach to security metrics. What does “more secure” mean for you?∗</title>
<author><name sortKey="Krautsevich, Leanid" sort="Krautsevich, Leanid" uniqKey="Krautsevich L" first="Leanid" last="Krautsevich">Leanid Krautsevich</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-133075" status="INCOMING"><orgName>department of computer science</orgName>
<desc><address><country key="FR"></country>
</address>
</desc>
<listRelation><relation active="#struct-301339" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-301339" type="direct"><org type="institution" xml:id="struct-301339" status="VALID"><orgName>Università di Pisa</orgName>
<desc><address><addrLine>Università di PisaLungarno Pacinotti 4356126 Pisa</addrLine>
<country key="IT"></country>
</address>
<ref type="url">https://www.unipi.it/index.php/english</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>France</country>
<placeName><settlement type="city">Pise</settlement>
<region type="region" nuts="2">Toscane</region>
</placeName>
<country>Italie</country>
<orgName type="university">Université de Pise</orgName>
</affiliation>
</author>
<author><name sortKey="Martinelli, Fabio" sort="Martinelli, Fabio" uniqKey="Martinelli F" first="Fabio" last="Martinelli">Fabio Martinelli</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
<author><name sortKey="Yautsiukhin, Artsiom" sort="Yautsiukhin, Artsiom" uniqKey="Yautsiukhin A" first="Artsiom" last="Yautsiukhin">Artsiom Yautsiukhin</name>
<affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-108594" status="VALID"><orgName>Istituto di Informatica e Telematica</orgName>
<orgName type="acronym">IIT-CNR</orgName>
<desc><address><addrLine>IIT - CNR Via Giuseppe Moruzzi, 1 56124 Pisa Italy</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.iit.cnr.it/</ref>
</desc>
<listRelation><relation active="#struct-302223" type="direct"></relation>
</listRelation>
<tutelles><tutelle active="#struct-302223" type="direct"><org type="institution" xml:id="struct-302223" status="VALID"><orgName>Consiglio Nazionale delle Ricerche [Roma]</orgName>
<orgName type="acronym">CNR</orgName>
<desc><address><addrLine>Piazzale Aldo Moro,7 - 00185, Roma</addrLine>
<country key="IT"></country>
</address>
<ref type="url">http://www.cnr.it/sitocnr/home.html</ref>
</desc>
</org>
</tutelle>
</tutelles>
</hal:affiliation>
<country>Italie</country>
</affiliation>
</author>
</analytic>
</biblStruct>
</sourceDesc>
</fileDesc>
<profileDesc><textClass></textClass>
</profileDesc>
</teiHeader>
<front><div type="abstract" xml:lang="en">Security metrics are the tools for providing correct and upto- date information about a state of security. This information is essential for managing security efficiently. Although a number of security metrics were proposed we still need reliable ways for assessment of security. First of all, we do not have a widely-accepted and unambiguous definition which defines what it means that one system is more secure than another one. Without this knowledge we cannot show that a metric really measures security. Second, there is no a universal formal model for all metrics which can be used for rigourous analysis. In this paper we investigate how we can define “more secure” relation and propose our basic formal model for a description and analysis of security metrics.</div>
</front>
</TEI>
</record>
Pour manipuler ce document sous Unix (Dilib)
EXPLOR_STEP=$WICRI_ROOT/Ticri/CIDE/explor/TelematiV1/Data/Main/Merge
HfdSelect -h $EXPLOR_STEP/biblio.hfd -nk 000A74 | SxmlIndent | more
Ou
HfdSelect -h $EXPLOR_AREA/Data/Main/Merge/biblio.hfd -nk 000A74 | SxmlIndent | more
Pour mettre un lien sur cette page dans le réseau Wicri
{{Explor lien |wiki= Ticri/CIDE |area= TelematiV1 |flux= Main |étape= Merge |type= RBID |clé= Hal:inria-00536758 |texte= Formal approach to security metrics. What does “more secure” mean for you?∗ }}
![]() | This area was generated with Dilib version V0.6.31. | ![]() |