Since the earliest times of history, humanity has been known to be fighting an existential war against nature. Although man’s struggle his natural environment not caused severe damage nature for centuries, human-induced environmental degradation begun seen with modernization, effect which was experienced a great extent in 20th century. With both population growth and technological developments,...

The security policies for computing resources must match the security policies of the organizations that use them; therefore, computer security policies must be adaptive to meet the changing security environment of their user-base. This paper presents four methods for implementing adaptive security policies for architectures which separate the de nition of the policy in a Security Server from t...

Mobile users present challenges for security in multi-domain mobile networks. The actions of mobile users moving across security domains need to be specified and checked against domain and inter-domain policies. We propose a new formal security policy model for multi-domain mobile networks, called FPM-RBAC, Formal Policy Model for Mobility with Role Based Access Control. FPM-RBAC supports the s...

Reeexive ow policies provide abstract characterizations of certain multilevel conndentiality requirements. This paper describes how reeexive ow policies can be used to construct and reason about large/complex multilevel policies. In particular, we describe how reeexive policies can be used to develop and reason about security policies for multilevel relational databases. Our approach facilitate...

The field of information security encompasses various models and policies developed with different objectives lacking cohesion from the security management facet. This paper identifies a group of problems within these policies, including the challenges in applying these policies to the end-user. As a solution, four possible approaches, termed as conservative, liberal, prima facie and superegora...

Every organization has policies, defined either implicitly or explicitly, that are intended to influence the behavior of subjects and objects associated with the organization. A policy is a rule or a set of constraints that applies to some scenario in the daily lifecycle of the organization’s activity. Business rules describe terms and conditions, service provisions, contracts and their executi...