Compositional Security Modelling Structure, Economics, and Behaviour

Caulfield, T.; Pym, D.; Williams, J.

doi:10.1007/978-3-319-07620-1_21

Compositional Security Modelling Structure, Economics, and Behaviour

Caulfield, T.; Pym, D.; Williams, J.

Authors

T. Caulfield

D. Pym

Professor Julian Williams julian.williams@durham.ac.uk
Head of Department

Abstract

Security managers face the challenge of formulating and implementing policies that deliver their desired system security postures — for example, their preferred balance of confidentiality, integrity, and availability — within budget (monetary and otherwise). In this paper, we describe a security modelling methodology, grounded in rigorous mathematical systems modelling and economics, that captures the managers’ policies and the behavioural choices of agents operating within the system. Models are executable, so allowing systematic experimental exploration of the system-policy co-design space, and compositional, so managing the complexity of large-scale systems.

Citation

Caulfield, T., Pym, D., & Williams, J. (2014). Compositional Security Modelling Structure, Economics, and Behaviour. In Human aspects of information security, privacy, and trust : 2nd International Conference, HAS 2014, Held as part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014 : proceedings (233-245). Springer Verlag. https://doi.org/10.1007/978-3-319-07620-1_21

Publication Date	Jun 27, 2014
Deposit Date	Jun 30, 2015
Publicly Available Date	Jul 7, 2015
Publisher	Springer Verlag
Pages	233-245
Series Title	Lecture notes in computer science
Series Number	8533
Book Title	Human aspects of information security, privacy, and trust : 2nd International Conference, HAS 2014, Held as part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014 : proceedings
ISBN	9783319076195
DOI	https://doi.org/10.1007/978-3-319-07620-1_21
Public URL	https://durham-repository.worktribe.com/output/1675288
Additional Information	Volume title: Human Aspects of Information Security, Privacy, and Trust: Second International Conference, HAS 2014, Held as Part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014. Proceedings. Edited by: Theo Tryfonas and Ioannis Askoxylakis.