Large scale distributed applications combine network access with multiple storage and computational elements. The distributed responsibility for resource control creates new security issues, caused by the complexity of the operating environment. In particular, policies at multiple layers and locations force conventional mechanisms such as firewalls and compartmented file storage into roles wher...

While traditional network security policies have been enforced by manual configuration of individual network components such as router ACLs, firewalls, NATs and VLANs, emerging enterprise network designs and products support global policies declared over high level abstractions [2, 1, 14, 13]. We further the evolution of simpler and more powerful network security mechanisms by designing, implem...

Cells arriving to an ATM network experience random delays due to queueing in upstream multiplexing stages, notably in customer premises. This is the phenomenon of jitter and the aim of the present paper is to study its in uence on peak rate enforcement. We rst introduce some general characterizations of jitter and then, describe two models of jittered ows based on simple queueing systems. We di...

Cloud computing is a major emerging technology that is significantly changing industrial computing paradigms and business practices. However, security and privacy concerns have arisen as obstacles to widespread adoption of clouds by users. While much cloud security research focuses on enforcing standard access control policies typical of centralized systems, such policies often prove inadequate...

Young children enforce social norms from early on, but little research has examined how this enforcement behaviour emerges. This study investigated whether observing an adult's norm enforcement influences children's own enforcement of that norm compared with observing an action demonstration without enforcement. Additionally, children experienced enforcement either following their own (second-p...

This paper examines how enforcement affects the structure and performance of emissions trading programs with price controls under uncertainty about firms’ abatement costs. The analysis highlights how an enforcement strategy can cause abatement-cost risk to be transmitted to enforcement costs via the price of permits. When this occurs, accommodating the effect of abatement-cost risk with an opti...

This study builds on the literature on the economics of output quotas in the presence of cheating. We extend previous work by Giannakas and Fulton (2000a) by examining the decisions of the agency responsible for the enforcement of output quotas in a decentralized policy-making structure. Enforcement policy design is modeled as a sequential game between the agency that determines the enforcement...

In the landmark paper on the theoretical side of Polymer, Ligatti and his co-authors have identified a new class of enforcement mechanisms based on the notion of edit automata, that can transform sequences and enforce more than simple safety properties. We show that there is a gap between the edit automata that one can possibly write (e.g. by Ligatti himself in his running example) and the edit...