EAGER: A Logic-Based Security Framework for Wired and Mobile Perimeter

EAGER：基于逻辑的有线和移动周边安全框架

• 批准号: 1347958
• 负责人: Vijay Kumar
• 金额: $ 15万
• 依托单位: University of Missouri-Kansas City
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-10-01 至 2016-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1347958&HistoricalAwards=false
• 关键词: EAGER; Logic; Based; Security; Framework

Mobile (wireless) communication has become an essential information exchange platform for today's enterprise and government organizations. They need to secure mobile devices as they secure wired devices. Today, it is common for these organizations to have multiple external mobile and wireless connections to the outside world to provide high bandwidth and tolerate connection failures. One way to protect the network perimeter is to use border gateways that impose a uniform static policy on network traffic (wired and wireless) entering through its borders and by installing effective security schemes and policies on mobile devices itself. While being simple, such a static policy has many disadvantages and may not provide necessary protection to mobile and wired perimeter. They are (a) unable to react to changes in its external environment, (b) they have physical limitations and differences in trust relationships, and (c) completeness among a non- communicating set of policies is problematic. Therefore, in order to provide perimeter protection policies that react to dynamic changes (quite frequent in mobile perimeter) and respect organizational objectives such as preferential treatment, yet enforce overall security objectives of organizations, requires that individual policies enforced at each border gateway be (a) dynamic and flexible, and (b) be a part of a global policy such that taken together enforce common security objectives in mobile infrastructure. In this proposal we achieve this by a logic-based security framework. Our solution has the potential to improve the security while reducing the management costs.

移动的（无线）通信已经成为当今企业和政府组织的重要信息交换平台。他们需要像保护有线设备一样保护移动的设备。如今，这些组织通常具有到外部世界的多个外部移动的和无线连接，以提供高带宽并容忍连接故障。保护网络边界的一种方法是使用边界网关，对通过其边界进入的网络流量（有线和无线）施加统一的静态策略，并在移动的设备本身上安装有效的安全方案和策略。虽然简单，但是这样的静态策略具有许多缺点，并且可能不向移动的和有线周界提供必要的保护。它们（a）无法对其外部环境的变化做出反应，（B）它们在信任关系中具有物理限制和差异，以及（c）非通信策略集之间的完整性是有问题的。因此，为了提供对动态变化做出反应的周界保护策略，（在移动的边界中非常常见）并尊重组织目标（例如优惠待遇），但执行组织的总体安全目标，要求在每个边界网关处执行的各个策略是（a）动态且灵活的，以及（B）是全局策略的一部分，使得一起执行移动的基础设施中的共同安全目标。在这个建议中，我们通过一个基于逻辑的安全框架来实现这一点。我们的解决方案有可能提高安全性，同时降低管理成本。

项目成果

Efficient Design of Firewall Temporal Policies

防火墙临时策略的高效设计

• DOI: 10.1109/compsac.2016.104
• 发表时间: 2016
• 期刊: 2016 IEEE 40th Annual Computer Software and Applications Conference (COMPSAC
• 作者: Maddumala, Mahesh Nath;Kumar, Vijay
• 通讯作者: Kumar, Vijay

A Logic-Based Security Framework for Mobile Perimeter

基于逻辑的移动边界安全框架

• DOI: 10.1109/mdm.2015.53
• 发表时间: 2015
• 期刊: 2015 16th IEEE International Conference on Mobile Data Management
• 作者: Maddumala, Mahesh Nath;Kumar, Vijay
• 通讯作者: Kumar, Vijay

Location-Based Security Framework for Cloud Perimeters

云边界基于位置的安全框架

• DOI: 10.1109/mcc.2014.59
• 发表时间: 2014
• 期刊: IEEE Cloud Computing
• 作者: Jaiswal, Chetan;Nath, Mahesh;Kumar, Vijay
• 通讯作者: Kumar, Vijay